@mastra/factory 0.24.0-alpha.9 → 0.25.0-alpha.0

package/dist/integrations/subscription-session.d.ts

@@ -53,7 +53,6 @@ export declare function createSessionAsRowOwner(controller: Pick<MountedMastraCo
     ownerResourceId: string;
     row: FactorySessionOwner;
     tags: Record<string, string>;
-    scope?: string;
     /** Bind this exact thread at creation instead of resuming or creating another. */
     threadId?: string;
 }): Promise<import("@mastra/core/harness").Session<import("@mastra/code-sdk/schema").MastraCodeState>>;

package/dist/integrations/subscription-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-session.d.ts","sourceRoot":"","sources":["../../src/integrations/subscription-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAEvF,oEAAoE;AACpE,MAAM,MAAM,mBAAmB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE;QAAE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;CACtF;AAED;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,sBAAsB,EACpC,aAAa,EAAE,yBAAyB,GAAG,SAAS,GACnD,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAyBrC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,yBAAyB,EACxC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,UAAU,GAAG,mBAAmB,GAAG,yBAAyB,GAAG,uBAAuB,CAAC,CAUjG;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,EAClE,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,mBAAmB,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,sGAeF;AAED,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAC3C,YAAY,EAAE,sBAAsB,EACpC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,yBAAyB,CAAA;CAAE,kHA2EtE"}
+{"version":3,"file":"subscription-session.d.ts","sourceRoot":"","sources":["../../src/integrations/subscription-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAEvF,oEAAoE;AACpE,MAAM,MAAM,mBAAmB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE;QAAE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;CACtF;AAED;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,sBAAsB,EACpC,aAAa,EAAE,yBAAyB,GAAG,SAAS,GACnD,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAyBrC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,yBAAyB,EACxC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,UAAU,GAAG,mBAAmB,GAAG,yBAAyB,GAAG,uBAAuB,CAAC,CAUjG;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,EAClE,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,mBAAmB,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,sGAcF;AAED,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAC3C,YAAY,EAAE,sBAAsB,EACpC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,yBAAyB,CAAA;CAAE,kHAyEtE"}

package/dist/integrations/subscription-session.js

@@ -69,7 +69,6 @@ async function createSessionAsRowOwner(controller, args) {
 		id: args.sessionId,
 		ownerId: args.row.userId,
 		resourceId: args.ownerResourceId,
-		scope: args.scope,
 		tags: args.tags,
 		...args.threadId ? { threadId: args.threadId } : {},
 		requestContext
@@ -84,8 +83,7 @@ async function resolveSubscriptionSession(controller, subscription, options) {
 	const thread = await controller.queryThreadById({ threadId });
 	if (!thread) return void 0;
 	const ownerResourceId = thread.resourceId || resourceId;
-	const scope = subscription.sessionScope || void 0;
-	let session = await controller.getSessionByResource(ownerResourceId, scope);
+	let session = await controller.getSession(sessionId);
 	if (!session) {
 		const tags = {
 			factoryProjectId: resourceId,
@@ -97,7 +95,6 @@ async function resolveSubscriptionSession(controller, subscription, options) {
 			sessionId,
 			ownerResourceId,
 			row: sessionRow,
-			scope,
 			tags
 		});
 	} else if (!hasResolvedOrg(session.state?.get()?.factoryOrgId)) try {

package/dist/integrations/subscription-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-session.js","names":[],"sources":["../../src/integrations/subscription-session.ts"],"sourcesContent":["import type { MountedMastraCode } from '@mastra/code-sdk';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { primeTenantCredentialsForRequestContext } from '../routes/tenant-credentials.js';\nimport { hasResolvedOrg, seedSessionOrg } from '../session/org-seed.js';\nimport type { IntegrationSubscription } from '../storage/domains/integrations/base.js';\n\n/** The Factory session row fields a woken session has to run as. */\nexport type FactorySessionOwner = { userId: string; orgId: string };\n\nexport interface SubscriptionSessionLookup {\n  sessions: { getBySessionId(sessionId: string): Promise<FactorySessionOwner | null> };\n}\n\n/**\n * Bring the session that owns a subscribed thread online so a provider event\n * can be delivered to it. Provider-neutral: GitHub and GitLab subscriptions\n * carry the same session binding and differ only in their target data.\n */\nexport type SubscriptionSessionRow = IntegrationSubscription<{\n  projectRepositoryId: string;\n  subscribedByUserId?: string | null;\n}>;\n\n/**\n * The request context a provider-triggered run executes under: the user who\n * subscribed the thread, in the subscription's organization. A webhook carries\n * no signed-in user and tenant credential resolution fails closed without one,\n * so a woken run would otherwise stop before it could persist or answer the\n * notification. The subscription row already names that user, so delivery\n * costs no extra read; an older row without one falls back to the Factory\n * session's owner, the identity used when a session is recreated for delivery.\n */\nexport async function subscriptionRunContext(\n  subscription: SubscriptionSessionRow,\n  sourceControl: SubscriptionSessionLookup | undefined,\n): Promise<RequestContext | undefined> {\n  let userId = subscription.data.subscribedByUserId ?? undefined;\n  let orgId: string | undefined = subscription.orgId;\n  if (!userId && subscription.sessionId && sourceControl) {\n    const sessionRow = await sourceControl.sessions.getBySessionId(subscription.sessionId);\n    userId = sessionRow?.userId;\n    orgId = sessionRow?.orgId ?? orgId;\n  }\n  if (!userId || !hasResolvedOrg(orgId)) return undefined;\n  const requestContext = new RequestContext();\n  requestContext.set('user', { workosId: userId, organizationId: orgId });\n  // The web auth middleware primes credential snapshots per request; a\n  // webhook-triggered run has no request, so prime here or the model resolves\n  // against an empty snapshot and the run fails closed before persisting. A\n  // priming failure propagates: handing back an unprimed context would let the\n  // caller accept the delivery, and retire a terminal subscription, for a run\n  // that then fails without its credentials and cannot be redelivered.\n  try {\n    await primeTenantCredentialsForRequestContext(requestContext);\n  } catch (error) {\n    throw new Error(`Unable to prime tenant credentials for subscription ${subscription.id}; not delivered.`, {\n      cause: error,\n    });\n  }\n  return requestContext;\n}\n\n/**\n * Attach the Factory session's owner, in its organization, to the request\n * context of a run that has no inbound request (a notification or peer-signal\n * wake), and prime that tenant's credentials. The live session's `ownerId`\n * isn't used: sessions opened from the browser or Slack are owned by the\n * controller id, not a user. Leaves the context alone when `sessionId` names no\n * Factory session or its org is unresolved, so credential resolution fails\n * closed.\n */\nexport async function prepareSessionRunContext(\n  requestContext: RequestContext,\n  sessionId: string,\n  sourceControl: SubscriptionSessionLookup,\n  options?: { expectedOrgId?: string },\n): Promise<'prepared' | 'session-not-found' | 'organization-unresolved' | 'organization-mismatch'> {\n  const sessionRow = await sourceControl.sessions.getBySessionId(sessionId);\n  if (!sessionRow) return 'session-not-found';\n  if (!hasResolvedOrg(sessionRow.orgId)) return 'organization-unresolved';\n  if (options?.expectedOrgId !== undefined && sessionRow.orgId !== options.expectedOrgId) {\n    return 'organization-mismatch';\n  }\n  requestContext.set('user', { workosId: sessionRow.userId, organizationId: sessionRow.orgId });\n  await primeTenantCredentialsForRequestContext(requestContext);\n  return 'prepared';\n}\n\n/**\n * Create the controller session for a Factory session that isn't live, as its\n * row's owner in the row's organization. Used when an event or message has to\n * reach a session nobody has open: there is no signed-in user, so the session\n * runs as the person it belongs to.\n */\nexport async function createSessionAsRowOwner(\n  controller: Pick<MountedMastraCode['controller'], 'createSession'>,\n  args: {\n    sessionId: string;\n    ownerResourceId: string;\n    row: FactorySessionOwner;\n    tags: Record<string, string>;\n    scope?: string;\n    /** Bind this exact thread at creation instead of resuming or creating another. */\n    threadId?: string;\n  },\n) {\n  const requestContext = new RequestContext();\n  requestContext.set('user', { workosId: args.row.userId, organizationId: args.row.orgId });\n  const session = await controller.createSession({\n    id: args.sessionId,\n    ownerId: args.row.userId,\n    resourceId: args.ownerResourceId,\n    scope: args.scope,\n    tags: args.tags,\n    ...(args.threadId ? { threadId: args.threadId } : {}),\n    requestContext,\n  });\n  await seedSessionOrg(session, args.row.orgId);\n  return session;\n}\n\nexport async function resolveSubscriptionSession(\n  controller: MountedMastraCode['controller'],\n  subscription: SubscriptionSessionRow,\n  options: { label: string; sourceControl?: SubscriptionSessionLookup },\n) {\n  const { label } = options;\n  const { sessionId, resourceId, threadId } = subscription;\n  if (!sessionId || !resourceId || !threadId) {\n    throw new Error(`${label} subscription ${subscription.id} is missing its session binding.`);\n  }\n  // Read the thread straight from storage before touching sessions. This answers\n  // two questions at once, and `queryThreadById` does it without constructing a\n  // session (so no workspace or sandbox is provisioned just to make the check).\n  //\n  // First: do we even have this thread? A change request's events can reach a\n  // deployment that never owned the subscribed thread, and delivery must not\n  // fabricate a session for a thread that lives somewhere else.\n  //\n  // Second: which resource owns it? The subscription records the Factory project\n  // as its `resourceId`, but an unscoped session is registered under its own id,\n  // so the stored value routinely names a resource that does not own the thread.\n  // The thread row is the authoritative answer; the stored id is only a fallback.\n  const thread = await controller.queryThreadById({ threadId });\n  if (!thread) return undefined;\n  const ownerResourceId = thread.resourceId || resourceId;\n  const scope = subscription.sessionScope || undefined;\n  let session = await controller.getSessionByResource(ownerResourceId, scope);\n  if (!session) {\n    const tags = {\n      factoryProjectId: resourceId,\n      projectRepositoryId: subscription.data.projectRepositoryId,\n    };\n    // Creating the session resolves its workspace, which authorizes the caller\n    // against the Factory session row — no signed-in user, so run as its owner.\n    // The session is created under the resource that owns the thread, so the\n    // thread switch below resolves; the persisted Factory session is keyed by\n    // the subscription's session ID.\n    const sessionRow = await options.sourceControl?.sessions.getBySessionId(sessionId);\n    if (!sessionRow) {\n      throw new Error(`${label} subscription ${subscription.id} has no Factory session ${sessionId} to run as.`);\n    }\n    session = await createSessionAsRowOwner(controller, {\n      sessionId,\n      ownerResourceId,\n      row: sessionRow,\n      scope,\n      tags,\n    });\n  } else if (!hasResolvedOrg(session.state?.get()?.factoryOrgId)) {\n    // A session created before the org seed existed carries the project tag and\n    // no org, so capture would refuse for the rest of its life even though the\n    // org is recoverable. Heal it — but only here, and only when it is missing:\n    // hoisting the row fetch above would make an existing-session delivery throw\n    // on a missing row where it previously succeeded, and fetching it every time\n    // would add a storage read to every delivery. A row that is missing or a\n    // lookup that throws leaves the session marked unresolved, and delivery\n    // continues either way.\n    try {\n      const sessionRow = await options.sourceControl?.sessions.getBySessionId(sessionId);\n      await seedSessionOrg(session, sessionRow?.orgId);\n    } catch (error) {\n      console.warn(`[${label} webhook] Unable to resolve the session organization.`, error);\n      await seedSessionOrg(session, undefined);\n    }\n  } else if (session.state?.get()?.factoryOrgUnresolved) {\n    // The org is present, so an earlier failed resolution left a stale marker\n    // behind. Clear it without a storage read — nothing else re-seeds a session\n    // once the start hook has run, so the marker would otherwise outlive its\n    // cause.\n    await seedSessionOrg(session, session.state.get()?.factoryOrgId);\n  }\n  if (session.thread.getId() !== threadId) {\n    await session.thread.switch({ threadId, emitEvent: false });\n  }\n  if (session.thread.getId() !== threadId) {\n    throw new Error(`Session ${sessionId} did not bind thread ${threadId}.`);\n  }\n  return session;\n}\n"],"mappings":";;;;;;;;;;;;;AAiCA,eAAsB,uBACpB,cACA,eACqC;CACrC,IAAI,SAAS,aAAa,KAAK,sBAAsB,KAAA;CACrD,IAAI,QAA4B,aAAa;CAC7C,IAAI,CAAC,UAAU,aAAa,aAAa,eAAe;EACtD,MAAM,aAAa,MAAM,cAAc,SAAS,eAAe,aAAa,SAAS;EACrF,SAAS,YAAY;EACrB,QAAQ,YAAY,SAAS;CAC/B;CACA,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,GAAG,OAAO,KAAA;CAC9C,MAAM,iBAAiB,IAAI,eAAe;CAC1C,eAAe,IAAI,QAAQ;EAAE,UAAU;EAAQ,gBAAgB;CAAM,CAAC;CAOtE,IAAI;EACF,MAAM,wCAAwC,cAAc;CAC9D,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,uDAAuD,aAAa,GAAG,mBAAmB,EACxG,OAAO,MACT,CAAC;CACH;CACA,OAAO;AACT;;;;;;;;;;AAWA,eAAsB,yBACpB,gBACA,WACA,eACA,SACiG;CACjG,MAAM,aAAa,MAAM,cAAc,SAAS,eAAe,SAAS;CACxE,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI,CAAC,eAAe,WAAW,KAAK,GAAG,OAAO;CAC9C,IAAI,SAAS,kBAAkB,KAAA,KAAa,WAAW,UAAU,QAAQ,eACvE,OAAO;CAET,eAAe,IAAI,QAAQ;EAAE,UAAU,WAAW;EAAQ,gBAAgB,WAAW;CAAM,CAAC;CAC5F,MAAM,wCAAwC,cAAc;CAC5D,OAAO;AACT;;;;;;;AAQA,eAAsB,wBACpB,YACA,MASA;CACA,MAAM,iBAAiB,IAAI,eAAe;CAC1C,eAAe,IAAI,QAAQ;EAAE,UAAU,KAAK,IAAI;EAAQ,gBAAgB,KAAK,IAAI;CAAM,CAAC;CACxF,MAAM,UAAU,MAAM,WAAW,cAAc;EAC7C,IAAI,KAAK;EACT,SAAS,KAAK,IAAI;EAClB,YAAY,KAAK;EACjB,OAAO,KAAK;EACZ,MAAM,KAAK;EACX,GAAI,KAAK,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;EACnD;CACF,CAAC;CACD,MAAM,eAAe,SAAS,KAAK,IAAI,KAAK;CAC5C,OAAO;AACT;AAEA,eAAsB,2BACpB,YACA,cACA,SACA;CACA,MAAM,EAAE,UAAU;CAClB,MAAM,EAAE,WAAW,YAAY,aAAa;CAC5C,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,UAChC,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB,aAAa,GAAG,iCAAiC;CAc5F,MAAM,SAAS,MAAM,WAAW,gBAAgB,EAAE,SAAS,CAAC;CAC5D,IAAI,CAAC,QAAQ,OAAO,KAAA;CACpB,MAAM,kBAAkB,OAAO,cAAc;CAC7C,MAAM,QAAQ,aAAa,gBAAgB,KAAA;CAC3C,IAAI,UAAU,MAAM,WAAW,qBAAqB,iBAAiB,KAAK;CAC1E,IAAI,CAAC,SAAS;EACZ,MAAM,OAAO;GACX,kBAAkB;GAClB,qBAAqB,aAAa,KAAK;EACzC;EAMA,MAAM,aAAa,MAAM,QAAQ,eAAe,SAAS,eAAe,SAAS;EACjF,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB,aAAa,GAAG,0BAA0B,UAAU,YAAY;EAE3G,UAAU,MAAM,wBAAwB,YAAY;GAClD;GACA;GACA,KAAK;GACL;GACA;EACF,CAAC;CACH,OAAO,IAAI,CAAC,eAAe,QAAQ,OAAO,IAAI,CAAC,EAAE,YAAY,GAS3D,IAAI;EACF,MAAM,aAAa,MAAM,QAAQ,eAAe,SAAS,eAAe,SAAS;EACjF,MAAM,eAAe,SAAS,YAAY,KAAK;CACjD,SAAS,OAAO;EACd,QAAQ,KAAK,IAAI,MAAM,wDAAwD,KAAK;EACpF,MAAM,eAAe,SAAS,KAAA,CAAS;CACzC;MACK,IAAI,QAAQ,OAAO,IAAI,CAAC,EAAE,sBAK/B,MAAM,eAAe,SAAS,QAAQ,MAAM,IAAI,CAAC,EAAE,YAAY;CAEjE,IAAI,QAAQ,OAAO,MAAM,MAAM,UAC7B,MAAM,QAAQ,OAAO,OAAO;EAAE;EAAU,WAAW;CAAM,CAAC;CAE5D,IAAI,QAAQ,OAAO,MAAM,MAAM,UAC7B,MAAM,IAAI,MAAM,WAAW,UAAU,uBAAuB,SAAS,EAAE;CAEzE,OAAO;AACT"}
+{"version":3,"file":"subscription-session.js","names":[],"sources":["../../src/integrations/subscription-session.ts"],"sourcesContent":["import type { MountedMastraCode } from '@mastra/code-sdk';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { primeTenantCredentialsForRequestContext } from '../routes/tenant-credentials.js';\nimport { hasResolvedOrg, seedSessionOrg } from '../session/org-seed.js';\nimport type { IntegrationSubscription } from '../storage/domains/integrations/base.js';\n\n/** The Factory session row fields a woken session has to run as. */\nexport type FactorySessionOwner = { userId: string; orgId: string };\n\nexport interface SubscriptionSessionLookup {\n  sessions: { getBySessionId(sessionId: string): Promise<FactorySessionOwner | null> };\n}\n\n/**\n * Bring the session that owns a subscribed thread online so a provider event\n * can be delivered to it. Provider-neutral: GitHub and GitLab subscriptions\n * carry the same session binding and differ only in their target data.\n */\nexport type SubscriptionSessionRow = IntegrationSubscription<{\n  projectRepositoryId: string;\n  subscribedByUserId?: string | null;\n}>;\n\n/**\n * The request context a provider-triggered run executes under: the user who\n * subscribed the thread, in the subscription's organization. A webhook carries\n * no signed-in user and tenant credential resolution fails closed without one,\n * so a woken run would otherwise stop before it could persist or answer the\n * notification. The subscription row already names that user, so delivery\n * costs no extra read; an older row without one falls back to the Factory\n * session's owner, the identity used when a session is recreated for delivery.\n */\nexport async function subscriptionRunContext(\n  subscription: SubscriptionSessionRow,\n  sourceControl: SubscriptionSessionLookup | undefined,\n): Promise<RequestContext | undefined> {\n  let userId = subscription.data.subscribedByUserId ?? undefined;\n  let orgId: string | undefined = subscription.orgId;\n  if (!userId && subscription.sessionId && sourceControl) {\n    const sessionRow = await sourceControl.sessions.getBySessionId(subscription.sessionId);\n    userId = sessionRow?.userId;\n    orgId = sessionRow?.orgId ?? orgId;\n  }\n  if (!userId || !hasResolvedOrg(orgId)) return undefined;\n  const requestContext = new RequestContext();\n  requestContext.set('user', { workosId: userId, organizationId: orgId });\n  // The web auth middleware primes credential snapshots per request; a\n  // webhook-triggered run has no request, so prime here or the model resolves\n  // against an empty snapshot and the run fails closed before persisting. A\n  // priming failure propagates: handing back an unprimed context would let the\n  // caller accept the delivery, and retire a terminal subscription, for a run\n  // that then fails without its credentials and cannot be redelivered.\n  try {\n    await primeTenantCredentialsForRequestContext(requestContext);\n  } catch (error) {\n    throw new Error(`Unable to prime tenant credentials for subscription ${subscription.id}; not delivered.`, {\n      cause: error,\n    });\n  }\n  return requestContext;\n}\n\n/**\n * Attach the Factory session's owner, in its organization, to the request\n * context of a run that has no inbound request (a notification or peer-signal\n * wake), and prime that tenant's credentials. The live session's `ownerId`\n * isn't used: sessions opened from the browser or Slack are owned by the\n * controller id, not a user. Leaves the context alone when `sessionId` names no\n * Factory session or its org is unresolved, so credential resolution fails\n * closed.\n */\nexport async function prepareSessionRunContext(\n  requestContext: RequestContext,\n  sessionId: string,\n  sourceControl: SubscriptionSessionLookup,\n  options?: { expectedOrgId?: string },\n): Promise<'prepared' | 'session-not-found' | 'organization-unresolved' | 'organization-mismatch'> {\n  const sessionRow = await sourceControl.sessions.getBySessionId(sessionId);\n  if (!sessionRow) return 'session-not-found';\n  if (!hasResolvedOrg(sessionRow.orgId)) return 'organization-unresolved';\n  if (options?.expectedOrgId !== undefined && sessionRow.orgId !== options.expectedOrgId) {\n    return 'organization-mismatch';\n  }\n  requestContext.set('user', { workosId: sessionRow.userId, organizationId: sessionRow.orgId });\n  await primeTenantCredentialsForRequestContext(requestContext);\n  return 'prepared';\n}\n\n/**\n * Create the controller session for a Factory session that isn't live, as its\n * row's owner in the row's organization. Used when an event or message has to\n * reach a session nobody has open: there is no signed-in user, so the session\n * runs as the person it belongs to.\n */\nexport async function createSessionAsRowOwner(\n  controller: Pick<MountedMastraCode['controller'], 'createSession'>,\n  args: {\n    sessionId: string;\n    ownerResourceId: string;\n    row: FactorySessionOwner;\n    tags: Record<string, string>;\n    /** Bind this exact thread at creation instead of resuming or creating another. */\n    threadId?: string;\n  },\n) {\n  const requestContext = new RequestContext();\n  requestContext.set('user', { workosId: args.row.userId, organizationId: args.row.orgId });\n  const session = await controller.createSession({\n    id: args.sessionId,\n    ownerId: args.row.userId,\n    resourceId: args.ownerResourceId,\n    tags: args.tags,\n    ...(args.threadId ? { threadId: args.threadId } : {}),\n    requestContext,\n  });\n  await seedSessionOrg(session, args.row.orgId);\n  return session;\n}\n\nexport async function resolveSubscriptionSession(\n  controller: MountedMastraCode['controller'],\n  subscription: SubscriptionSessionRow,\n  options: { label: string; sourceControl?: SubscriptionSessionLookup },\n) {\n  const { label } = options;\n  const { sessionId, resourceId, threadId } = subscription;\n  if (!sessionId || !resourceId || !threadId) {\n    throw new Error(`${label} subscription ${subscription.id} is missing its session binding.`);\n  }\n  // Read the thread straight from storage before touching sessions. This answers\n  // two questions at once, and `queryThreadById` does it without constructing a\n  // session (so no workspace or sandbox is provisioned just to make the check).\n  //\n  // First: do we even have this thread? A change request's events can reach a\n  // deployment that never owned the subscribed thread, and delivery must not\n  // fabricate a session for a thread that lives somewhere else.\n  //\n  // Second: which resource owns it? The subscription records the Factory project\n  // as its `resourceId`, but the session may run under a different resource\n  // (its own id, for sessions created before Factory resources were shared).\n  // The thread row is the authoritative answer; the stored id is only a fallback.\n  const thread = await controller.queryThreadById({ threadId });\n  if (!thread) return undefined;\n  const ownerResourceId = thread.resourceId || resourceId;\n  let session = await controller.getSession(sessionId);\n  if (!session) {\n    const tags = {\n      factoryProjectId: resourceId,\n      projectRepositoryId: subscription.data.projectRepositoryId,\n    };\n    // Creating the session resolves its workspace, which authorizes the caller\n    // against the Factory session row — no signed-in user, so run as its owner.\n    // The session is created under the resource that owns the thread, so the\n    // thread switch below resolves; the persisted Factory session is keyed by\n    // the subscription's session ID.\n    const sessionRow = await options.sourceControl?.sessions.getBySessionId(sessionId);\n    if (!sessionRow) {\n      throw new Error(`${label} subscription ${subscription.id} has no Factory session ${sessionId} to run as.`);\n    }\n    session = await createSessionAsRowOwner(controller, {\n      sessionId,\n      ownerResourceId,\n      row: sessionRow,\n      tags,\n    });\n  } else if (!hasResolvedOrg(session.state?.get()?.factoryOrgId)) {\n    // A session created before the org seed existed carries the project tag and\n    // no org, so capture would refuse for the rest of its life even though the\n    // org is recoverable. Heal it — but only here, and only when it is missing:\n    // hoisting the row fetch above would make an existing-session delivery throw\n    // on a missing row where it previously succeeded, and fetching it every time\n    // would add a storage read to every delivery. A row that is missing or a\n    // lookup that throws leaves the session marked unresolved, and delivery\n    // continues either way.\n    try {\n      const sessionRow = await options.sourceControl?.sessions.getBySessionId(sessionId);\n      await seedSessionOrg(session, sessionRow?.orgId);\n    } catch (error) {\n      console.warn(`[${label} webhook] Unable to resolve the session organization.`, error);\n      await seedSessionOrg(session, undefined);\n    }\n  } else if (session.state?.get()?.factoryOrgUnresolved) {\n    // The org is present, so an earlier failed resolution left a stale marker\n    // behind. Clear it without a storage read — nothing else re-seeds a session\n    // once the start hook has run, so the marker would otherwise outlive its\n    // cause.\n    await seedSessionOrg(session, session.state.get()?.factoryOrgId);\n  }\n  if (session.thread.getId() !== threadId) {\n    await session.thread.switch({ threadId, emitEvent: false });\n  }\n  if (session.thread.getId() !== threadId) {\n    throw new Error(`Session ${sessionId} did not bind thread ${threadId}.`);\n  }\n  return session;\n}\n"],"mappings":";;;;;;;;;;;;;AAiCA,eAAsB,uBACpB,cACA,eACqC;CACrC,IAAI,SAAS,aAAa,KAAK,sBAAsB,KAAA;CACrD,IAAI,QAA4B,aAAa;CAC7C,IAAI,CAAC,UAAU,aAAa,aAAa,eAAe;EACtD,MAAM,aAAa,MAAM,cAAc,SAAS,eAAe,aAAa,SAAS;EACrF,SAAS,YAAY;EACrB,QAAQ,YAAY,SAAS;CAC/B;CACA,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,GAAG,OAAO,KAAA;CAC9C,MAAM,iBAAiB,IAAI,eAAe;CAC1C,eAAe,IAAI,QAAQ;EAAE,UAAU;EAAQ,gBAAgB;CAAM,CAAC;CAOtE,IAAI;EACF,MAAM,wCAAwC,cAAc;CAC9D,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,uDAAuD,aAAa,GAAG,mBAAmB,EACxG,OAAO,MACT,CAAC;CACH;CACA,OAAO;AACT;;;;;;;;;;AAWA,eAAsB,yBACpB,gBACA,WACA,eACA,SACiG;CACjG,MAAM,aAAa,MAAM,cAAc,SAAS,eAAe,SAAS;CACxE,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI,CAAC,eAAe,WAAW,KAAK,GAAG,OAAO;CAC9C,IAAI,SAAS,kBAAkB,KAAA,KAAa,WAAW,UAAU,QAAQ,eACvE,OAAO;CAET,eAAe,IAAI,QAAQ;EAAE,UAAU,WAAW;EAAQ,gBAAgB,WAAW;CAAM,CAAC;CAC5F,MAAM,wCAAwC,cAAc;CAC5D,OAAO;AACT;;;;;;;AAQA,eAAsB,wBACpB,YACA,MAQA;CACA,MAAM,iBAAiB,IAAI,eAAe;CAC1C,eAAe,IAAI,QAAQ;EAAE,UAAU,KAAK,IAAI;EAAQ,gBAAgB,KAAK,IAAI;CAAM,CAAC;CACxF,MAAM,UAAU,MAAM,WAAW,cAAc;EAC7C,IAAI,KAAK;EACT,SAAS,KAAK,IAAI;EAClB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,GAAI,KAAK,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;EACnD;CACF,CAAC;CACD,MAAM,eAAe,SAAS,KAAK,IAAI,KAAK;CAC5C,OAAO;AACT;AAEA,eAAsB,2BACpB,YACA,cACA,SACA;CACA,MAAM,EAAE,UAAU;CAClB,MAAM,EAAE,WAAW,YAAY,aAAa;CAC5C,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,UAChC,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB,aAAa,GAAG,iCAAiC;CAc5F,MAAM,SAAS,MAAM,WAAW,gBAAgB,EAAE,SAAS,CAAC;CAC5D,IAAI,CAAC,QAAQ,OAAO,KAAA;CACpB,MAAM,kBAAkB,OAAO,cAAc;CAC7C,IAAI,UAAU,MAAM,WAAW,WAAW,SAAS;CACnD,IAAI,CAAC,SAAS;EACZ,MAAM,OAAO;GACX,kBAAkB;GAClB,qBAAqB,aAAa,KAAK;EACzC;EAMA,MAAM,aAAa,MAAM,QAAQ,eAAe,SAAS,eAAe,SAAS;EACjF,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB,aAAa,GAAG,0BAA0B,UAAU,YAAY;EAE3G,UAAU,MAAM,wBAAwB,YAAY;GAClD;GACA;GACA,KAAK;GACL;EACF,CAAC;CACH,OAAO,IAAI,CAAC,eAAe,QAAQ,OAAO,IAAI,CAAC,EAAE,YAAY,GAS3D,IAAI;EACF,MAAM,aAAa,MAAM,QAAQ,eAAe,SAAS,eAAe,SAAS;EACjF,MAAM,eAAe,SAAS,YAAY,KAAK;CACjD,SAAS,OAAO;EACd,QAAQ,KAAK,IAAI,MAAM,wDAAwD,KAAK;EACpF,MAAM,eAAe,SAAS,KAAA,CAAS;CACzC;MACK,IAAI,QAAQ,OAAO,IAAI,CAAC,EAAE,sBAK/B,MAAM,eAAe,SAAS,QAAQ,MAAM,IAAI,CAAC,EAAE,YAAY;CAEjE,IAAI,QAAQ,OAAO,MAAM,MAAM,UAC7B,MAAM,QAAQ,OAAO,OAAO;EAAE;EAAU,WAAW;CAAM,CAAC;CAE5D,IAAI,QAAQ,OAAO,MAAM,MAAM,UAC7B,MAAM,IAAI,MAAM,WAAW,UAAU,uBAAuB,SAAS,EAAE;CAEzE,OAAO;AACT"}

package/dist/integrations/workos/integration.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration.js","names":["#client","#returnUrl"],"sources":["../../../src/integrations/workos/integration.ts"],"sourcesContent":["import { WorkOSAdminPortal } from '@mastra/auth-workos';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { AuditEventRow } from '../../storage/domains/audit/base.js';\nimport type { FactoryIntegration, IntegrationContext } from '../base.js';\n\ntype WorkOSClient = ConstructorParameters<typeof WorkOSAdminPortal>[0];\n\nconst UNKNOWN_LOCATION = 'unknown';\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nfunction flattenMetadata(metadata: Record<string, unknown>): Record<string, string | number | boolean> {\n  const flat: Record<string, string | number | boolean> = {};\n  for (const [key, value] of Object.entries(metadata)) {\n    if (value === undefined || value === null) continue;\n    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {\n      flat[key] = value;\n      continue;\n    }\n    try {\n      flat[key] = JSON.stringify(value);\n    } catch {\n      // Drop unserializable metadata rather than the event.\n    }\n  }\n  return flat;\n}\n\nexport function toWorkOSEvent(event: AuditEventRow): {\n  action: string;\n  occurredAt: Date;\n  actor: { type: string; id: string };\n  targets: Array<{ type: string; id: string; name?: string }>;\n  context: { location: string; userAgent?: string };\n  metadata: Record<string, string | number | boolean>;\n} {\n  return {\n    action: event.action,\n    occurredAt: event.occurredAt,\n    actor: { type: event.actorType === 'human' ? 'user' : event.actorType, id: event.actorId },\n    targets: event.targets.map(target => ({\n      type: target.type,\n      id: target.id,\n      ...(target.name !== undefined ? { name: target.name } : {}),\n    })),\n    context: {\n      location: event.context.location ?? UNKNOWN_LOCATION,\n      ...(event.context.userAgent !== undefined ? { userAgent: event.context.userAgent } : {}),\n    },\n    metadata: flattenMetadata(event.metadata),\n  };\n}\n\n/** Optional WorkOS mirror and Admin Portal route, independent of the auth adapter. */\nexport class WorkOSAuditIntegration implements FactoryIntegration {\n  readonly id = 'workos';\n  readonly #client: WorkOSClient;\n  readonly #returnUrl: string;\n\n  constructor({ client, returnUrl }: { client: WorkOSClient; returnUrl: string }) {\n    this.#client = client;\n    this.#returnUrl = returnUrl;\n  }\n\n  async audit({ event }: { event: AuditEventRow }): Promise<void> {\n    try {\n      await this.#client.auditLogs.createEvent(event.orgId, toWorkOSEvent(event));\n    } catch (err) {\n      console.warn('[Audit] Failed to forward audit event to WorkOS', {\n        action: event.action,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    const { auth } = ctx;\n    return [\n      registerApiRoute('/web/audit/portal-link', {\n        method: 'GET',\n        handler: async cc => {\n          const c = loose(cc);\n          await auth.ensureUser(c);\n          const tenant = auth.tenant(c);\n          if (!tenant) return c.json({ error: 'unauthorized' }, 401);\n          if (!tenant.orgId) {\n            return c.json(\n              { error: 'organization_required', message: 'The audit trail requires a WorkOS organization.' },\n              403,\n            );\n          }\n\n          try {\n            const portal = new WorkOSAdminPortal(this.#client, { returnUrl: this.#returnUrl });\n            const url = await portal.getPortalLink(tenant.orgId, 'audit_logs');\n            return c.json({ url });\n          } catch (err) {\n            console.warn('[Audit] Failed to generate WorkOS Admin Portal link', {\n              error: err instanceof Error ? err.message : String(err),\n            });\n            return c.json({ error: 'portal_link_failed' }, 502);\n          }\n        },\n      }),\n    ];\n  }\n\n  diagnostics(): Record<string, unknown> {\n    return { configured: true };\n  }\n}\n"],"mappings":";;;AAUA,MAAM,mBAAmB;AAEzB,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAEA,SAAS,gBAAgB,UAA8E;CACrG,MAAM,OAAkD,CAAC;CACzD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAAG;EACnD,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM;EAC3C,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW;GACxF,KAAK,OAAO;GACZ;EACF;EACA,IAAI;GACF,KAAK,OAAO,KAAK,UAAU,KAAK;EAClC,QAAQ,CAER;CACF;CACA,OAAO;AACT;AAEA,SAAgB,cAAc,OAO5B;CACA,OAAO;EACL,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,OAAO;GAAE,MAAM,MAAM,cAAc,UAAU,SAAS,MAAM;GAAW,IAAI,MAAM;EAAQ;EACzF,SAAS,MAAM,QAAQ,KAAI,YAAW;GACpC,MAAM,OAAO;GACb,IAAI,OAAO;GACX,GAAI,OAAO,SAAS,KAAA,IAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;EAC3D,EAAE;EACF,SAAS;GACP,UAAU,MAAM,QAAQ,YAAY;GACpC,GAAI,MAAM,QAAQ,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,QAAQ,UAAU,IAAI,CAAC;EACxF;EACA,UAAU,gBAAgB,MAAM,QAAQ;CAC1C;AACF;;AAGA,IAAa,yBAAb,MAAkE;CAChE,KAAc;CACd;CACA;CAEA,YAAY,EAAE,QAAQ,aAA0D;EAC9E,KAAKA,UAAU;EACf,KAAKC,aAAa;CACpB;CAEA,MAAM,MAAM,EAAE,SAAkD;EAC9D,IAAI;GACF,MAAM,KAAKD,QAAQ,UAAU,YAAY,MAAM,OAAO,cAAc,KAAK,CAAC;EAC5E,SAAS,KAAK;GACZ,QAAQ,KAAK,mDAAmD;IAC9D,QAAQ,MAAM;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;EACH;CACF;CAEA,OAAO,KAAqC;EAC1C,MAAM,EAAE,SAAS;EACjB,OAAO,CACL,iBAAiB,0BAA0B;GACzC,QAAQ;GACR,SAAS,OAAM,OAAM;IACnB,MAAM,IAAI,MAAM,EAAE;IAClB,MAAM,KAAK,WAAW,CAAC;IACvB,MAAM,SAAS,KAAK,OAAO,CAAC;IAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzD,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KACP;KAAE,OAAO;KAAyB,SAAS;IAAkD,GAC7F,GACF;IAGF,IAAI;KAEF,MAAM,MAAM,MAAM,IADC,kBAAkB,KAAKA,SAAS,EAAE,WAAW,KAAKC,WAAW,CACzD,CAAC,CAAC,cAAc,OAAO,OAAO,YAAY;KACjE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;IACvB,SAAS,KAAK;KACZ,QAAQ,KAAK,uDAAuD,EAClE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EACxD,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IACpD;GACF;EACF,CAAC,CACH;CACF;CAEA,cAAuC;EACrC,OAAO,EAAE,YAAY,KAAK;CAC5B;AACF"}
+{"version":3,"file":"integration.js","names":[],"sources":["../../../src/integrations/workos/integration.ts"],"sourcesContent":["import { WorkOSAdminPortal } from '@mastra/auth-workos';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { AuditEventRow } from '../../storage/domains/audit/base.js';\nimport type { FactoryIntegration, IntegrationContext } from '../base.js';\n\ntype WorkOSClient = ConstructorParameters<typeof WorkOSAdminPortal>[0];\n\nconst UNKNOWN_LOCATION = 'unknown';\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nfunction flattenMetadata(metadata: Record<string, unknown>): Record<string, string | number | boolean> {\n  const flat: Record<string, string | number | boolean> = {};\n  for (const [key, value] of Object.entries(metadata)) {\n    if (value === undefined || value === null) continue;\n    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {\n      flat[key] = value;\n      continue;\n    }\n    try {\n      flat[key] = JSON.stringify(value);\n    } catch {\n      // Drop unserializable metadata rather than the event.\n    }\n  }\n  return flat;\n}\n\nexport function toWorkOSEvent(event: AuditEventRow): {\n  action: string;\n  occurredAt: Date;\n  actor: { type: string; id: string };\n  targets: Array<{ type: string; id: string; name?: string }>;\n  context: { location: string; userAgent?: string };\n  metadata: Record<string, string | number | boolean>;\n} {\n  return {\n    action: event.action,\n    occurredAt: event.occurredAt,\n    actor: { type: event.actorType === 'human' ? 'user' : event.actorType, id: event.actorId },\n    targets: event.targets.map(target => ({\n      type: target.type,\n      id: target.id,\n      ...(target.name !== undefined ? { name: target.name } : {}),\n    })),\n    context: {\n      location: event.context.location ?? UNKNOWN_LOCATION,\n      ...(event.context.userAgent !== undefined ? { userAgent: event.context.userAgent } : {}),\n    },\n    metadata: flattenMetadata(event.metadata),\n  };\n}\n\n/** Optional WorkOS mirror and Admin Portal route, independent of the auth adapter. */\nexport class WorkOSAuditIntegration implements FactoryIntegration {\n  readonly id = 'workos';\n  readonly #client: WorkOSClient;\n  readonly #returnUrl: string;\n\n  constructor({ client, returnUrl }: { client: WorkOSClient; returnUrl: string }) {\n    this.#client = client;\n    this.#returnUrl = returnUrl;\n  }\n\n  async audit({ event }: { event: AuditEventRow }): Promise<void> {\n    try {\n      await this.#client.auditLogs.createEvent(event.orgId, toWorkOSEvent(event));\n    } catch (err) {\n      console.warn('[Audit] Failed to forward audit event to WorkOS', {\n        action: event.action,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    const { auth } = ctx;\n    return [\n      registerApiRoute('/web/audit/portal-link', {\n        method: 'GET',\n        handler: async cc => {\n          const c = loose(cc);\n          await auth.ensureUser(c);\n          const tenant = auth.tenant(c);\n          if (!tenant) return c.json({ error: 'unauthorized' }, 401);\n          if (!tenant.orgId) {\n            return c.json(\n              { error: 'organization_required', message: 'The audit trail requires a WorkOS organization.' },\n              403,\n            );\n          }\n\n          try {\n            const portal = new WorkOSAdminPortal(this.#client, { returnUrl: this.#returnUrl });\n            const url = await portal.getPortalLink(tenant.orgId, 'audit_logs');\n            return c.json({ url });\n          } catch (err) {\n            console.warn('[Audit] Failed to generate WorkOS Admin Portal link', {\n              error: err instanceof Error ? err.message : String(err),\n            });\n            return c.json({ error: 'portal_link_failed' }, 502);\n          }\n        },\n      }),\n    ];\n  }\n\n  diagnostics(): Record<string, unknown> {\n    return { configured: true };\n  }\n}\n"],"mappings":";;;AAUA,MAAM,mBAAmB;AAEzB,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAEA,SAAS,gBAAgB,UAA8E;CACrG,MAAM,OAAkD,CAAC;CACzD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAAG;EACnD,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM;EAC3C,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW;GACxF,KAAK,OAAO;GACZ;EACF;EACA,IAAI;GACF,KAAK,OAAO,KAAK,UAAU,KAAK;EAClC,QAAQ,CAER;CACF;CACA,OAAO;AACT;AAEA,SAAgB,cAAc,OAO5B;CACA,OAAO;EACL,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,OAAO;GAAE,MAAM,MAAM,cAAc,UAAU,SAAS,MAAM;GAAW,IAAI,MAAM;EAAQ;EACzF,SAAS,MAAM,QAAQ,KAAI,YAAW;GACpC,MAAM,OAAO;GACb,IAAI,OAAO;GACX,GAAI,OAAO,SAAS,KAAA,IAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;EAC3D,EAAE;EACF,SAAS;GACP,UAAU,MAAM,QAAQ,YAAY;GACpC,GAAI,MAAM,QAAQ,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,QAAQ,UAAU,IAAI,CAAC;EACxF;EACA,UAAU,gBAAgB,MAAM,QAAQ;CAC1C;AACF;;AAGA,IAAa,yBAAb,MAAkE;CAChE,KAAc;CACd;CACA;CAEA,YAAY,EAAE,QAAQ,aAA0D;EAC9E,KAAK,UAAU;EACf,KAAK,aAAa;CACpB;CAEA,MAAM,MAAM,EAAE,SAAkD;EAC9D,IAAI;GACF,MAAM,KAAK,QAAQ,UAAU,YAAY,MAAM,OAAO,cAAc,KAAK,CAAC;EAC5E,SAAS,KAAK;GACZ,QAAQ,KAAK,mDAAmD;IAC9D,QAAQ,MAAM;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;EACH;CACF;CAEA,OAAO,KAAqC;EAC1C,MAAM,EAAE,SAAS;EACjB,OAAO,CACL,iBAAiB,0BAA0B;GACzC,QAAQ;GACR,SAAS,OAAM,OAAM;IACnB,MAAM,IAAI,MAAM,EAAE;IAClB,MAAM,KAAK,WAAW,CAAC;IACvB,MAAM,SAAS,KAAK,OAAO,CAAC;IAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzD,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KACP;KAAE,OAAO;KAAyB,SAAS;IAAkD,GAC7F,GACF;IAGF,IAAI;KAEF,MAAM,MAAM,MAAM,IADC,kBAAkB,KAAK,SAAS,EAAE,WAAW,KAAK,WAAW,CACzD,CAAC,CAAC,cAAc,OAAO,OAAO,YAAY;KACjE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;IACvB,SAAS,KAAK;KACZ,QAAQ,KAAK,uDAAuD,EAClE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EACxD,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IACpD;GACF;EACF,CAAC,CACH;CACF;CAEA,cAAuC;EACrC,OAAO,EAAE,YAAY,KAAK;CAC5B;AACF"}

package/dist/mcp/events.d.ts

@@ -0,0 +1,73 @@
+import { z } from 'zod';
+import type { SourceControlSessionLookup } from '../session/factory-session.js';
+import type { AuditStorage } from '../storage/domains/audit/base.js';
+import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+declare const activityPayload: z.ZodObject<{
+    action: z.ZodString;
+    occurredAt: z.ZodString;
+    actor: z.ZodObject<{
+        type: z.ZodEnum<{
+            human: "human";
+            agent: "agent";
+            system: "system";
+        }>;
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    workItemId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    privateSession: z.ZodOptional<z.ZodLiteral<true>>;
+    summary: z.ZodString;
+}, z.core.$strip>;
+export type FactoryActivity = z.infer<typeof activityPayload>;
+export interface FactoryActivityEventDeps {
+    orgId: string;
+    factoryProjectId: string;
+    audit: Pick<AuditStorage, 'list'>;
+    workItems: Pick<WorkItemsStorage, 'getForProject'>;
+    sessions: Pick<SourceControlSessionLookup, 'getBySessionId'>;
+    /** Who is polling: sessions they can't view keep their activity out. */
+    viewer: {
+        orgId: string;
+        userId: string;
+    };
+}
+/**
+ * How long polling waits before moving past a row. `occurred_at` is set when the
+ * row is written, so a row that commits after a poll is still younger than this
+ * and lies ahead of the cursor, even if it shares a millisecond with the cursor row.
+ */
+export declare const ACTIVITY_SETTLE_MS = 5000;
+/**
+ * `factory.activity`: the Factory's audit trail as polled MCP events (SEP-3415, experimental).
+ *
+ * Serves activity on work items and sessions. Sessions follow the same rule as the
+ * session routes (`canViewSourceControlSession`). Work item activity is always served;
+ * when it happened in a session the caller can't see (another member's private
+ * session, or one that can't be found) it is marked `privateSession` and names no
+ * session. Activity on such a session alone is not served. An agent's activity
+ * counts as its session's when the agent's thread is a session. Events naming neither (intake settings, rule bindings'
+ * own actions) are not served.
+ *
+ * Poll-only by design: the MCP server is built per request, so there is nothing
+ * to push from, and every poll reads storage from the client's cursor. Events are
+ * delivered once they are {@link ACTIVITY_SETTLE_MS} old.
+ */
+export declare function factoryActivityEvent(deps: FactoryActivityEventDeps): import("@mastra/mcp").MCPServerEventDefinition<{
+    workItemId?: string | undefined;
+    actions?: string[] | undefined;
+}, {
+    action: string;
+    occurredAt: string;
+    actor: {
+        type: "human" | "agent" | "system";
+        id: string;
+        name?: string | undefined;
+    };
+    summary: string;
+    workItemId?: string | undefined;
+    sessionId?: string | undefined;
+    privateSession?: true | undefined;
+}>;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/mcp/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/mcp/events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAGhF,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,kCAAkC,CAAC;AAQpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAa9E,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;iBAanB,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IACnD,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAC7D,wEAAwE;IACxE,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAmCD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB;;;;;;;;;;;;;;;GAuFlE"}

package/dist/mcp/events.js

@@ -0,0 +1,158 @@
+import { canViewSourceControlSession } from "../routes/session-access.js";
+import { ACTOR_PROFILE_METADATA_KEY, auditCursorAt, decodeAuditAfterCursor, encodeAuditCursor } from "../storage/domains/audit/base.js";
+import { parseAuditAction } from "../storage/domains/audit/actions.js";
+import { AUDIT_ACTOR_TYPES } from "../storage/domains/audit/actors.js";
+import { z } from "zod";
+import { defineEvent } from "@mastra/mcp";
+//#region src/mcp/events.ts
+const activityArgs = z.object({
+	workItemId: z.string().min(1).optional().describe("Only activity on this work item."),
+	actions: z.array(z.string().min(1)).max(50).optional().describe("Only these actions, e.g. `factory.work_item.stage_moved`.")
+}).strict();
+const activityPayload = z.object({
+	action: z.string(),
+	occurredAt: z.string(),
+	actor: z.object({
+		type: z.enum(AUDIT_ACTOR_TYPES),
+		id: z.string(),
+		name: z.string().optional()
+	}),
+	workItemId: z.string().optional(),
+	sessionId: z.string().optional(),
+	/** The work item event happened in a session the caller can't see; which one stays hidden. */
+	privateSession: z.literal(true).optional(),
+	summary: z.string()
+});
+function toActivity(event, { workItem, session, privateSession, anonymousAgent }) {
+	const profile = event.metadata[ACTOR_PROFILE_METADATA_KEY];
+	const parsed = parseAuditAction(event.action);
+	const verb = parsed ? `${parsed.namespace === "work_item" ? "" : `${parsed.namespace} `}${parsed.leaf}`.replaceAll("_", " ") : event.action;
+	return {
+		action: event.action,
+		occurredAt: event.occurredAt.toISOString(),
+		actor: {
+			type: event.actorType,
+			id: (privateSession || anonymousAgent) && event.actorType === "agent" ? "agent" : event.actorId,
+			...typeof profile?.name === "string" ? { name: profile.name } : {}
+		},
+		...workItem ? { workItemId: workItem.id } : {},
+		...session ? { sessionId: session.sessionId } : {},
+		...privateSession ? { privateSession } : {},
+		summary: `${verb}: ${workItem ? workItem.name ?? workItem.id : session?.title ?? session?.branch ?? session?.sessionId}${privateSession ? " (in a private session)" : ""}`
+	};
+}
+/**
+* How long polling waits before moving past a row. `occurred_at` is set when the
+* row is written, so a row that commits after a poll is still younger than this
+* and lies ahead of the cursor, even if it shares a millisecond with the cursor row.
+*/
+const ACTIVITY_SETTLE_MS = 5e3;
+/**
+* `factory.activity`: the Factory's audit trail as polled MCP events (SEP-3415, experimental).
+*
+* Serves activity on work items and sessions. Sessions follow the same rule as the
+* session routes (`canViewSourceControlSession`). Work item activity is always served;
+* when it happened in a session the caller can't see (another member's private
+* session, or one that can't be found) it is marked `privateSession` and names no
+* session. Activity on such a session alone is not served. An agent's activity
+* counts as its session's when the agent's thread is a session. Events naming neither (intake settings, rule bindings'
+* own actions) are not served.
+*
+* Poll-only by design: the MCP server is built per request, so there is nothing
+* to push from, and every poll reads storage from the client's cursor. Events are
+* delivered once they are {@link ACTIVITY_SETTLE_MS} old.
+*/
+function factoryActivityEvent(deps) {
+	const project = {
+		orgId: deps.orgId,
+		factoryProjectId: deps.factoryProjectId
+	};
+	return defineEvent({
+		description: "Activity on this Factory’s work items and the sessions you can see: items created, updated, moved and commented on, runs, approvals, signals and agent commits, pushes and pull requests.",
+		inputSchema: activityArgs,
+		payloadSchema: activityPayload,
+		authorize: async ({ arguments: args }) => !args.workItemId || await deps.workItems.getForProject(deps.orgId, deps.factoryProjectId, args.workItemId) !== null,
+		poll: async ({ arguments: args, cursor, maxEvents, maxAgeMs }) => {
+			const now = Date.now();
+			if (cursor == null || !decodeAuditAfterCursor(cursor)) return {
+				events: [],
+				cursor: auditCursorAt(new Date(now)),
+				...cursor != null ? { truncated: true } : {}
+			};
+			const page = await deps.audit.list({
+				...project,
+				...args.actions?.length ? { actions: args.actions } : {},
+				after: cursor,
+				limit: maxEvents
+			});
+			const sessionCache = /* @__PURE__ */ new Map();
+			const lookup = (sessionId) => {
+				let found = sessionCache.get(sessionId);
+				if (!found) sessionCache.set(sessionId, found = deps.sessions.getBySessionId(sessionId));
+				return found;
+			};
+			const visible = (session) => session !== null && canViewSourceControlSession(session, deps.viewer);
+			/** What the event is about, or `undefined` when the caller may not see it. */
+			const subjectOf = async (event) => {
+				const workItem = event.targets.find((target) => target.type === "work_item");
+				const named = event.targets.filter((target) => target.type === "session").map((target) => target.id);
+				const sessions = await Promise.all(named.map(lookup));
+				let hidden = !sessions.every(visible);
+				let session = sessions[0];
+				let anonymousAgent = false;
+				if (event.actorType === "agent" && event.actorId.startsWith("agent:")) {
+					const actorSession = await lookup(event.actorId.slice(6));
+					if (!actorSession) anonymousAgent = true;
+					else if (!visible(actorSession)) hidden = true;
+					session ??= actorSession ?? void 0;
+				}
+				if (hidden) return workItem ? {
+					workItem,
+					privateSession: true
+				} : void 0;
+				if (!workItem && !session) return void 0;
+				return {
+					...workItem ? { workItem } : {},
+					...session ? { session } : {},
+					...anonymousAgent ? { anonymousAgent: true } : {}
+				};
+			};
+			const settledUntil = now - ACTIVITY_SETTLE_MS;
+			const expiredBefore = maxAgeMs === void 0 ? -Infinity : now - maxAgeMs;
+			const events = [];
+			let next = cursor;
+			let unsettled = false;
+			let expired = false;
+			for (const event of page.events) {
+				const at = event.occurredAt.getTime();
+				if (at > settledUntil) {
+					unsettled = true;
+					break;
+				}
+				next = encodeAuditCursor(event);
+				if (at < expiredBefore) {
+					expired = true;
+					continue;
+				}
+				if (args.workItemId && !event.targets.some((t) => t.type === "work_item" && t.id === args.workItemId)) continue;
+				const subject = await subjectOf(event);
+				if (!subject) continue;
+				events.push({
+					eventId: event.id,
+					timestamp: event.occurredAt,
+					data: toActivity(event, subject)
+				});
+			}
+			return {
+				events,
+				cursor: next,
+				...page.nextCursor && !unsettled ? { hasMore: true } : {},
+				...expired ? { truncated: true } : {}
+			};
+		}
+	});
+}
+//#endregion
+export { ACTIVITY_SETTLE_MS, factoryActivityEvent };
+
+//# sourceMappingURL=events.js.map

package/dist/mcp/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","names":[],"sources":["../../src/mcp/events.ts"],"sourcesContent":["import { defineEvent } from '@mastra/mcp';\nimport { z } from 'zod';\n\nimport { canViewSourceControlSession } from '../routes/session-access.js';\nimport type { SourceControlSessionLookup } from '../session/factory-session.js';\nimport { parseAuditAction } from '../storage/domains/audit/actions.js';\nimport { AUDIT_ACTOR_TYPES } from '../storage/domains/audit/actors.js';\nimport type { AuditStorage, AuditEventRow } from '../storage/domains/audit/base.js';\nimport {\n  ACTOR_PROFILE_METADATA_KEY,\n  auditCursorAt,\n  decodeAuditAfterCursor,\n  encodeAuditCursor,\n} from '../storage/domains/audit/base.js';\nimport type { SourceControlSession } from '../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\n\nconst activityArgs = z\n  .object({\n    workItemId: z.string().min(1).optional().describe('Only activity on this work item.'),\n    actions: z\n      .array(z.string().min(1))\n      .max(50)\n      .optional()\n      .describe('Only these actions, e.g. `factory.work_item.stage_moved`.'),\n  })\n  .strict();\n\nconst activityPayload = z.object({\n  action: z.string(),\n  occurredAt: z.string(),\n  actor: z.object({\n    type: z.enum(AUDIT_ACTOR_TYPES),\n    id: z.string(),\n    name: z.string().optional(),\n  }),\n  workItemId: z.string().optional(),\n  sessionId: z.string().optional(),\n  /** The work item event happened in a session the caller can't see; which one stays hidden. */\n  privateSession: z.literal(true).optional(),\n  summary: z.string(),\n});\n\nexport type FactoryActivity = z.infer<typeof activityPayload>;\n\nexport interface FactoryActivityEventDeps {\n  orgId: string;\n  factoryProjectId: string;\n  audit: Pick<AuditStorage, 'list'>;\n  workItems: Pick<WorkItemsStorage, 'getForProject'>;\n  sessions: Pick<SourceControlSessionLookup, 'getBySessionId'>;\n  /** Who is polling: sessions they can't view keep their activity out. */\n  viewer: { orgId: string; userId: string };\n}\n\ntype Subject = {\n  workItem?: { id: string; name?: string };\n  session?: SourceControlSession;\n  privateSession?: true;\n  /** The agent's thread couldn't be checked, so its id isn't shown. */\n  anonymousAgent?: true;\n};\n\nfunction toActivity(\n  event: AuditEventRow,\n  { workItem, session, privateSession, anonymousAgent }: Subject,\n): FactoryActivity {\n  const profile = event.metadata[ACTOR_PROFILE_METADATA_KEY] as { name?: unknown } | undefined;\n  const parsed = parseAuditAction(event.action);\n  const verb = parsed\n    ? `${parsed.namespace === 'work_item' ? '' : `${parsed.namespace} `}${parsed.leaf}`.replaceAll('_', ' ')\n    : event.action;\n  return {\n    action: event.action,\n    occurredAt: event.occurredAt.toISOString(),\n    actor: {\n      type: event.actorType,\n      // An agent's id is its thread, which is the hidden session's id.\n      id: (privateSession || anonymousAgent) && event.actorType === 'agent' ? 'agent' : event.actorId,\n      ...(typeof profile?.name === 'string' ? { name: profile.name } : {}),\n    },\n    ...(workItem ? { workItemId: workItem.id } : {}),\n    ...(session ? { sessionId: session.sessionId } : {}),\n    ...(privateSession ? { privateSession } : {}),\n    summary: `${verb}: ${workItem ? (workItem.name ?? workItem.id) : (session?.title ?? session?.branch ?? session?.sessionId)}${privateSession ? ' (in a private session)' : ''}`,\n  };\n}\n\n/**\n * How long polling waits before moving past a row. `occurred_at` is set when the\n * row is written, so a row that commits after a poll is still younger than this\n * and lies ahead of the cursor, even if it shares a millisecond with the cursor row.\n */\nexport const ACTIVITY_SETTLE_MS = 5_000;\n\n/**\n * `factory.activity`: the Factory's audit trail as polled MCP events (SEP-3415, experimental).\n *\n * Serves activity on work items and sessions. Sessions follow the same rule as the\n * session routes (`canViewSourceControlSession`). Work item activity is always served;\n * when it happened in a session the caller can't see (another member's private\n * session, or one that can't be found) it is marked `privateSession` and names no\n * session. Activity on such a session alone is not served. An agent's activity\n * counts as its session's when the agent's thread is a session. Events naming neither (intake settings, rule bindings'\n * own actions) are not served.\n *\n * Poll-only by design: the MCP server is built per request, so there is nothing\n * to push from, and every poll reads storage from the client's cursor. Events are\n * delivered once they are {@link ACTIVITY_SETTLE_MS} old.\n */\nexport function factoryActivityEvent(deps: FactoryActivityEventDeps) {\n  const project = { orgId: deps.orgId, factoryProjectId: deps.factoryProjectId };\n  return defineEvent({\n    description:\n      'Activity on this Factory’s work items and the sessions you can see: items created, updated, moved and commented on, runs, approvals, signals and agent commits, pushes and pull requests.',\n    inputSchema: activityArgs,\n    payloadSchema: activityPayload,\n    // The server is already scoped to the caller's Factory; this only rejects a work item outside it.\n    authorize: async ({ arguments: args }) =>\n      !args.workItemId ||\n      (await deps.workItems.getForProject(deps.orgId, deps.factoryProjectId, args.workItemId)) !== null,\n    poll: async ({ arguments: args, cursor, maxEvents, maxAgeMs }) => {\n      const now = Date.now();\n      if (cursor == null || !decodeAuditAfterCursor(cursor)) {\n        // No cursor means \"from now\". An unreadable one can't be resumed, so say events may have been missed.\n        return { events: [], cursor: auditCursorAt(new Date(now)), ...(cursor != null ? { truncated: true } : {}) };\n      }\n\n      const page = await deps.audit.list({\n        ...project,\n        ...(args.actions?.length ? { actions: args.actions } : {}),\n        after: cursor,\n        limit: maxEvents,\n      });\n      const sessionCache = new Map<string, Promise<SourceControlSession | null>>();\n      const lookup = (sessionId: string) => {\n        let found = sessionCache.get(sessionId);\n        if (!found) sessionCache.set(sessionId, (found = deps.sessions.getBySessionId(sessionId)));\n        return found;\n      };\n      const visible = (session: SourceControlSession | null): session is SourceControlSession =>\n        session !== null && canViewSourceControlSession(session, deps.viewer);\n      /** What the event is about, or `undefined` when the caller may not see it. */\n      const subjectOf = async (event: AuditEventRow): Promise<Subject | undefined> => {\n        const workItem = event.targets.find(target => target.type === 'work_item');\n        const named = event.targets.filter(target => target.type === 'session').map(target => target.id);\n        const sessions = await Promise.all(named.map(lookup));\n        let hidden = !sessions.every(visible);\n        let session = sessions[0];\n        let anonymousAgent = false;\n        if (event.actorType === 'agent' && event.actorId.startsWith('agent:')) {\n          const actorSession = await lookup(event.actorId.slice('agent:'.length));\n          // A thread that isn't a session (anymore) may still have been a private one.\n          if (!actorSession) anonymousAgent = true;\n          else if (!visible(actorSession)) hidden = true;\n          session ??= actorSession ?? undefined;\n        }\n        if (hidden) return workItem ? { workItem, privateSession: true } : undefined;\n        if (!workItem && !session) return undefined;\n        return {\n          ...(workItem ? { workItem } : {}),\n          ...(session ? { session } : {}),\n          ...(anonymousAgent ? { anonymousAgent: true } : {}),\n        };\n      };\n\n      const settledUntil = now - ACTIVITY_SETTLE_MS;\n      const expiredBefore = maxAgeMs === undefined ? -Infinity : now - maxAgeMs;\n      const events = [];\n      let next = cursor;\n      let unsettled = false;\n      let expired = false;\n      for (const event of page.events) {\n        const at = event.occurredAt.getTime();\n        if (at > settledUntil) {\n          unsettled = true;\n          break;\n        }\n        // Skipped rows still advance the cursor, so a filtered-out page isn't read again.\n        next = encodeAuditCursor(event);\n        if (at < expiredBefore) {\n          expired = true;\n          continue;\n        }\n        if (args.workItemId && !event.targets.some(t => t.type === 'work_item' && t.id === args.workItemId)) continue;\n        const subject = await subjectOf(event);\n        if (!subject) continue;\n        events.push({ eventId: event.id, timestamp: event.occurredAt, data: toActivity(event, subject) });\n      }\n      return {\n        events,\n        cursor: next,\n        ...(page.nextCursor && !unsettled ? { hasMore: true } : {}),\n        ...(expired ? { truncated: true } : {}),\n      };\n    },\n  });\n}\n"],"mappings":";;;;;;;AAiBA,MAAM,eAAe,EAClB,OAAO;CACN,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,kCAAkC;CACpF,SAAS,EACN,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CACxB,IAAI,EAAE,CAAC,CACP,SAAS,CAAC,CACV,SAAS,2DAA2D;AACzE,CAAC,CAAC,CACD,OAAO;AAEV,MAAM,kBAAkB,EAAE,OAAO;CAC/B,QAAQ,EAAE,OAAO;CACjB,YAAY,EAAE,OAAO;CACrB,OAAO,EAAE,OAAO;EACd,MAAM,EAAE,KAAK,iBAAiB;EAC9B,IAAI,EAAE,OAAO;EACb,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,CAAC;CACD,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;;CAE/B,gBAAgB,EAAE,QAAQ,IAAI,CAAC,CAAC,SAAS;CACzC,SAAS,EAAE,OAAO;AACpB,CAAC;AAsBD,SAAS,WACP,OACA,EAAE,UAAU,SAAS,gBAAgB,kBACpB;CACjB,MAAM,UAAU,MAAM,SAAS;CAC/B,MAAM,SAAS,iBAAiB,MAAM,MAAM;CAC5C,MAAM,OAAO,SACT,GAAG,OAAO,cAAc,cAAc,KAAK,GAAG,OAAO,UAAU,KAAK,OAAO,OAAO,WAAW,KAAK,GAAG,IACrG,MAAM;CACV,OAAO;EACL,QAAQ,MAAM;EACd,YAAY,MAAM,WAAW,YAAY;EACzC,OAAO;GACL,MAAM,MAAM;GAEZ,KAAK,kBAAkB,mBAAmB,MAAM,cAAc,UAAU,UAAU,MAAM;GACxF,GAAI,OAAO,SAAS,SAAS,WAAW,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;EACpE;EACA,GAAI,WAAW,EAAE,YAAY,SAAS,GAAG,IAAI,CAAC;EAC9C,GAAI,UAAU,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;EAClD,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;EAC3C,SAAS,GAAG,KAAK,IAAI,WAAY,SAAS,QAAQ,SAAS,KAAO,SAAS,SAAS,SAAS,UAAU,SAAS,YAAa,iBAAiB,4BAA4B;CAC5K;AACF;;;;;;AAOA,MAAa,qBAAqB;;;;;;;;;;;;;;;;AAiBlC,SAAgB,qBAAqB,MAAgC;CACnE,MAAM,UAAU;EAAE,OAAO,KAAK;EAAO,kBAAkB,KAAK;CAAiB;CAC7E,OAAO,YAAY;EACjB,aACE;EACF,aAAa;EACb,eAAe;EAEf,WAAW,OAAO,EAAE,WAAW,WAC7B,CAAC,KAAK,cACL,MAAM,KAAK,UAAU,cAAc,KAAK,OAAO,KAAK,kBAAkB,KAAK,UAAU,MAAO;EAC/F,MAAM,OAAO,EAAE,WAAW,MAAM,QAAQ,WAAW,eAAe;GAChE,MAAM,MAAM,KAAK,IAAI;GACrB,IAAI,UAAU,QAAQ,CAAC,uBAAuB,MAAM,GAElD,OAAO;IAAE,QAAQ,CAAC;IAAG,QAAQ,cAAc,IAAI,KAAK,GAAG,CAAC;IAAG,GAAI,UAAU,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;GAAG;GAG5G,MAAM,OAAO,MAAM,KAAK,MAAM,KAAK;IACjC,GAAG;IACH,GAAI,KAAK,SAAS,SAAS,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;IACxD,OAAO;IACP,OAAO;GACT,CAAC;GACD,MAAM,+BAAe,IAAI,IAAkD;GAC3E,MAAM,UAAU,cAAsB;IACpC,IAAI,QAAQ,aAAa,IAAI,SAAS;IACtC,IAAI,CAAC,OAAO,aAAa,IAAI,WAAY,QAAQ,KAAK,SAAS,eAAe,SAAS,CAAE;IACzF,OAAO;GACT;GACA,MAAM,WAAW,YACf,YAAY,QAAQ,4BAA4B,SAAS,KAAK,MAAM;;GAEtE,MAAM,YAAY,OAAO,UAAuD;IAC9E,MAAM,WAAW,MAAM,QAAQ,MAAK,WAAU,OAAO,SAAS,WAAW;IACzE,MAAM,QAAQ,MAAM,QAAQ,QAAO,WAAU,OAAO,SAAS,SAAS,CAAC,CAAC,KAAI,WAAU,OAAO,EAAE;IAC/F,MAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC;IACpD,IAAI,SAAS,CAAC,SAAS,MAAM,OAAO;IACpC,IAAI,UAAU,SAAS;IACvB,IAAI,iBAAiB;IACrB,IAAI,MAAM,cAAc,WAAW,MAAM,QAAQ,WAAW,QAAQ,GAAG;KACrE,MAAM,eAAe,MAAM,OAAO,MAAM,QAAQ,MAAM,CAAe,CAAC;KAEtE,IAAI,CAAC,cAAc,iBAAiB;UAC/B,IAAI,CAAC,QAAQ,YAAY,GAAG,SAAS;KAC1C,YAAY,gBAAgB,KAAA;IAC9B;IACA,IAAI,QAAQ,OAAO,WAAW;KAAE;KAAU,gBAAgB;IAAK,IAAI,KAAA;IACnE,IAAI,CAAC,YAAY,CAAC,SAAS,OAAO,KAAA;IAClC,OAAO;KACL,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;KAC/B,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;KAC7B,GAAI,iBAAiB,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACnD;GACF;GAEA,MAAM,eAAe,MAAM;GAC3B,MAAM,gBAAgB,aAAa,KAAA,IAAY,YAAY,MAAM;GACjE,MAAM,SAAS,CAAC;GAChB,IAAI,OAAO;GACX,IAAI,YAAY;GAChB,IAAI,UAAU;GACd,KAAK,MAAM,SAAS,KAAK,QAAQ;IAC/B,MAAM,KAAK,MAAM,WAAW,QAAQ;IACpC,IAAI,KAAK,cAAc;KACrB,YAAY;KACZ;IACF;IAEA,OAAO,kBAAkB,KAAK;IAC9B,IAAI,KAAK,eAAe;KACtB,UAAU;KACV;IACF;IACA,IAAI,KAAK,cAAc,CAAC,MAAM,QAAQ,MAAK,MAAK,EAAE,SAAS,eAAe,EAAE,OAAO,KAAK,UAAU,GAAG;IACrG,MAAM,UAAU,MAAM,UAAU,KAAK;IACrC,IAAI,CAAC,SAAS;IACd,OAAO,KAAK;KAAE,SAAS,MAAM;KAAI,WAAW,MAAM;KAAY,MAAM,WAAW,OAAO,OAAO;IAAE,CAAC;GAClG;GACA,OAAO;IACL;IACA,QAAQ;IACR,GAAI,KAAK,cAAc,CAAC,YAAY,EAAE,SAAS,KAAK,IAAI,CAAC;IACzD,GAAI,UAAU,EAAE,WAAW,KAAK,IAAI,CAAC;GACvC;EACF;CACF,CAAC;AACH"}

package/dist/mcp/routes.d.ts

@@ -28,7 +28,6 @@ export interface FactoryMcpRoutesDeps {
     /** Source-control handles a connector session can be filed under, tried in order. */
     sourceControls: readonly SourceControlStorageHandle[];
     tools: FactoryToolDependencies;
-    version?: string;
 }
 /** The connector session a user's MCP client acts from: one per user and Factory, stable across requests. */
 export declare function connectorSessionId(orgId: string, userId: string, factoryProjectId: string): string;

package/dist/mcp/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/mcp/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAQ/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAG5F,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGnF,eAAO,MAAM,gBAAgB,yCAAyC,CAAC;AASvE,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,+FAA+F;AAC/F,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAE9E,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,EAAE,CAMV;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,qFAAqF;IACrF,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,KAAK,EAAE,uBAAuB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,6GAA6G;AAC7G,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAGlG;AAyFD,sEAAsE;AACtE,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAe1C;AAwED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAoB5E"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/mcp/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAQ/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAG5F,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAInF,eAAO,MAAM,gBAAgB,yCAAyC,CAAC;AASvE,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAgBD,+FAA+F;AAC/F,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAE9E,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,EAAE,CAMV;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,qFAAqF;IACrF,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,KAAK,EAAE,uBAAuB,CAAC;CAChC;AAED,6GAA6G;AAC7G,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAGlG;AAyFD,sEAAsE;AACtE,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAe1C;AAuFD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAoB5E"}

package/dist/mcp/routes.js

@@ -5,6 +5,7 @@ import { auditActorProfile } from "../storage/domains/audit/base.js";
 import { FACTORY_TOOL_ANNOTATIONS } from "../tools/annotations.js";
 import { createFactoryTools } from "../tools/index.js";
 import { propagateClientDisconnect } from "./disconnect.js";
+import { factoryActivityEvent } from "./events.js";
 import { registerApiRoute } from "@mastra/core/server";
 import { createHash } from "crypto";
 import { z } from "zod";
@@ -19,6 +20,18 @@ const PROTECTED_RESOURCE_PREFIX = "/.well-known/oauth-protected-resource";
 * that started this one; a connector session is started by a person, not a session.
 */
 const EXCLUDED_TOOLS = /* @__PURE__ */ new Set(["factory_message_origin"]);
+/**
+* MCP requires a server version. The Factory doesn't expose its package
+* version at runtime, so this versions the endpoint's interface instead.
+*/
+const FACTORY_MCP_SERVER_VERSION = "1.0.0";
+/** What a connected client is told the server is for and where to start. */
+const FACTORY_MCP_INSTRUCTIONS = [
+	"A Mastra Factory tracks software work as work items on a board; agent sessions plan and build them.",
+	"Start with `factory_list_attention` for what needs a person, or `search` and `fetch` to find a work item.",
+	"Work item tools file, update, move and follow items; session tools start, message and follow the agent sessions working on them.",
+	"Every call runs as the signed-in user. When the Factory has a repository, session tools act from a private connector session of theirs."
+].join(" ");
 /** Mastra Platform's WorkOS AuthKit, which issues tokens Platform's `/auth/verify` accepts. */
 const PLATFORM_MCP_AUTHORIZATION_SERVER = "https://auth-kit.mastra.ai";
 function resolveMcpAuthorizationServers(providerName, config, env = process.env) {
@@ -171,7 +184,7 @@ async function handleMcp(deps, c) {
 		factoryProjectId,
 		userId: tenant.userId,
 		sessionId,
-		resourceId: sessionId,
+		resourceId: tenant.userId,
 		threadId: sessionId,
 		kind: "user",
 		interactive: true,
@@ -180,9 +193,22 @@ async function handleMcp(deps, c) {
 	const server = new MCPServer({
 		id: `factory-${factoryProjectId}`,
 		name: `${project.name ?? "Mastra"} Factory`,
-		version: deps.version ?? "1.0.0",
+		version: FACTORY_MCP_SERVER_VERSION,
 		description: "Manage work items, sessions and decisions in a Mastra Factory.",
-		tools: createFactoryMcpTools(scope, deps, { persistedSession: persisted })
+		instructions: FACTORY_MCP_INSTRUCTIONS,
+		legacy: "stateless",
+		tools: createFactoryMcpTools(scope, deps, { persistedSession: persisted }),
+		events: { "factory.activity": factoryActivityEvent({
+			orgId: tenant.orgId,
+			factoryProjectId,
+			audit: deps.tools.audit,
+			workItems: deps.tools.workItems,
+			sessions: deps.tools.sessions,
+			viewer: {
+				orgId: tenant.orgId,
+				userId: tenant.userId
+			}
+		}) }
 	});
 	const { req, res } = toReqRes(c.req.raw);
 	const done = server.startHTTP({
@@ -190,7 +216,8 @@ async function handleMcp(deps, c) {
 		httpPath: mcpPath,
 		req,
 		res
-	}).catch(() => {
+	}).catch((error) => {
+		console.warn("[factory] MCP request failed:", error);
 		if (!res.headersSent) {
 			res.writeHead(500, { "Content-Type": "application/json" });
 			res.end(JSON.stringify({

package/dist/mcp/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","names":[],"sources":["../../src/mcp/routes.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport { createTool } from '@mastra/core/tools';\nimport type { Tool } from '@mastra/core/tools';\nimport { MCPServer } from '@mastra/mcp';\nimport { toFetchResponse, toReqRes } from 'fetch-to-node';\nimport type { Context } from 'hono';\nimport { z } from 'zod';\n\nimport { getFactoryAuthUser } from '../auth.js';\nimport { PLATFORM_AUTH_PROVIDER } from '../platform-auth-host.js';\nimport type { RouteAuth } from '../routes/route.js';\nimport { ensureFactorySourceSession, FactorySourceSessionResolutionError } from '../session/factory-session.js';\nimport { auditActorProfile } from '../storage/domains/audit/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { FACTORY_TOOL_ANNOTATIONS } from '../tools/annotations.js';\nimport { createFactoryTools } from '../tools/index.js';\nimport type { FactoryToolDependencies, FactoryToolScope } from '../tools/index.js';\nimport { propagateClientDisconnect } from './disconnect.js';\n\nexport const FACTORY_MCP_PATH = '/web/factory/projects/:projectId/mcp';\nconst PROTECTED_RESOURCE_PREFIX = '/.well-known/oauth-protected-resource';\n\n/**\n * Tools an MCP client never gets. `factory_message_origin` answers the session\n * that started this one; a connector session is started by a person, not a session.\n */\nconst EXCLUDED_TOOLS = new Set(['factory_message_origin']);\n\nexport interface FactoryMcpConfig {\n  /** Serve the MCP endpoint. Default `true`; it is never served without an auth provider. */\n  enabled?: boolean;\n  /**\n   * OAuth authorization servers advertised in the protected-resource metadata\n   * (RFC 9728) so clients like ChatGPT know where to sign in. Defaults to the\n   * `MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER` env var, then to Mastra Platform's\n   * AuthKit when the Factory uses Platform auth. The endpoint isn't served\n   * without one, since clients would have nowhere to sign in.\n   */\n  authorizationServers?: string[];\n}\n\n/** Mastra Platform's WorkOS AuthKit, which issues tokens Platform's `/auth/verify` accepts. */\nexport const PLATFORM_MCP_AUTHORIZATION_SERVER = 'https://auth-kit.mastra.ai';\n\nexport function resolveMcpAuthorizationServers(\n  providerName: string | undefined,\n  config: FactoryMcpConfig | undefined,\n  env: Record<string, string | undefined> = process.env,\n): string[] {\n  if (config?.authorizationServers?.length) return config.authorizationServers;\n  const fromEnv = env.MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER?.trim();\n  if (fromEnv) return [fromEnv];\n  if (providerName === PLATFORM_AUTH_PROVIDER) return [PLATFORM_MCP_AUTHORIZATION_SERVER];\n  return [];\n}\n\nexport interface FactoryMcpRoutesDeps {\n  auth: RouteAuth;\n  publicOrigin: string;\n  authorizationServers: string[];\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  /** Source-control handles a connector session can be filed under, tried in order. */\n  sourceControls: readonly SourceControlStorageHandle[];\n  tools: FactoryToolDependencies;\n  version?: string;\n}\n\n/** The connector session a user's MCP client acts from: one per user and Factory, stable across requests. */\nexport function connectorSessionId(orgId: string, userId: string, factoryProjectId: string): string {\n  const hex = createHash('sha256').update(`mcp\\0${orgId}\\0${userId}\\0${factoryProjectId}`).digest('hex');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-5${hex.slice(13, 16)}-8${hex.slice(17, 20)}-${hex.slice(20, 32)}`;\n}\n\n/**\n * Get or create the private user session behind a person's MCP client, so\n * session-scoped tools (start/signal sessions, follow work items) have a real\n * session to act from. A Factory without a connected repository has nowhere to\n * file one; its tools still run against the stable id.\n */\nasync function ensureConnectorSession(\n  deps: FactoryMcpRoutesDeps,\n  args: { orgId: string; userId: string; factoryProjectId: string },\n): Promise<{ sessionId: string; persisted: boolean }> {\n  const sessionId = connectorSessionId(args.orgId, args.userId, args.factoryProjectId);\n  if (await deps.tools.sessions.getBySessionId(sessionId)) return { sessionId, persisted: true };\n  for (const sourceControl of deps.sourceControls) {\n    try {\n      await ensureFactorySourceSession({\n        sourceControl,\n        orgId: args.orgId,\n        factoryProjectId: args.factoryProjectId,\n        branch: `factory/mcp-${sessionId.slice(0, 8)}`,\n        attributeToUserId: args.userId,\n        sessionId,\n        visibility: 'private',\n      });\n      return { sessionId, persisted: true };\n    } catch (error) {\n      if (!(error instanceof FactorySourceSessionResolutionError)) throw error;\n    }\n  }\n  return { sessionId, persisted: false };\n}\n\nfunction workItemUrl(publicOrigin: string, factoryProjectId: string, workItemId: string): string {\n  return `${publicOrigin}/factory/${encodeURIComponent(factoryProjectId)}/work-items/${encodeURIComponent(workItemId)}`;\n}\n\n/**\n * `search` and `fetch`, the two tools ChatGPT's connectors and deep research\n * look for, answered from the Factory's work items.\n */\nfunction createSearchFetchTools(\n  scope: FactoryToolScope,\n  deps: FactoryMcpRoutesDeps,\n  inspect: Tool<any, any, any, any> | undefined,\n): Record<string, Tool<any, any, any, any>> {\n  const project = { orgId: scope.orgId, factoryProjectId: scope.factoryProjectId };\n  return {\n    search: createTool({\n      id: 'search',\n      description:\n        'Search this Factory’s work items by title or id. Returns matching items with ids to pass to `fetch`.',\n      inputSchema: z.object({ query: z.string().describe('Words to look for in work item titles.') }),\n      execute: async ({ query }) => {\n        const terms = query.toLowerCase().split(/\\s+/).filter(Boolean);\n        const items = await deps.tools.workItems.list(project);\n        const results = items\n          .filter(item => {\n            const haystack = `${item.id} ${item.title}`.toLowerCase();\n            return terms.every(term => haystack.includes(term));\n          })\n          .slice(0, 20)\n          .map(item => ({\n            id: item.id,\n            title: item.title,\n            url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, item.id),\n          }));\n        return { results };\n      },\n    }),\n    fetch: createTool({\n      id: 'fetch',\n      description: 'Fetch everything the Factory knows about one work item, by the id `search` returned.',\n      inputSchema: z.object({ id: z.string().describe('Work item id.') }),\n      execute: async ({ id }, context) => {\n        if (!inspect?.execute) throw new Error('Work item details are unavailable.');\n        const details = (await inspect.execute({ workItem: id }, context)) as { item?: { title?: string } };\n        return {\n          id,\n          title: details.item?.title ?? id,\n          text: JSON.stringify(details, null, 2),\n          url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, id),\n          metadata: { factoryProjectId: scope.factoryProjectId },\n        };\n      },\n    }),\n  };\n}\n\n/** The tools a signed-in person's MCP client sees for one Factory. */\nexport function createFactoryMcpTools(\n  scope: FactoryToolScope,\n  deps: FactoryMcpRoutesDeps,\n  options: { persistedSession?: boolean } = {},\n): Record<string, Tool<any, any, any, any>> {\n  const factoryTools = createFactoryTools({ scope, deps: deps.tools }) as Record<string, Tool<any, any, any, any>>;\n  const tools: Record<string, Tool<any, any, any, any>> = {};\n  for (const [name, tool] of Object.entries(factoryTools)) {\n    if (EXCLUDED_TOOLS.has(name)) continue;\n    // Starting a sub-session needs a real parent session row to file it under.\n    if (name === 'factory_start_session' && options.persistedSession === false) continue;\n    tools[name] = tool;\n  }\n  Object.assign(tools, createSearchFetchTools(scope, deps, factoryTools.factory_inspect_work_item));\n  for (const [name, tool] of Object.entries(tools)) {\n    const annotations = FACTORY_TOOL_ANNOTATIONS[name];\n    if (annotations) tool.mcp = { ...tool.mcp, annotations };\n  }\n  return tools;\n}\n\nfunction resourceMetadataUrl(deps: FactoryMcpRoutesDeps, mcpPath: string): string {\n  return `${deps.publicOrigin}${PROTECTED_RESOURCE_PREFIX}${mcpPath}`;\n}\n\nfunction unauthorized(deps: FactoryMcpRoutesDeps, mcpPath: string, error = 'unauthorized'): Response {\n  return new Response(JSON.stringify({ error }), {\n    status: 401,\n    headers: {\n      'Content-Type': 'application/json',\n      'WWW-Authenticate': `Bearer resource_metadata=\"${resourceMetadataUrl(deps, mcpPath)}\"`,\n    },\n  });\n}\n\nasync function handleMcp(deps: FactoryMcpRoutesDeps, c: Context): Promise<Response> {\n  const factoryProjectId = c.req.param('projectId') ?? '';\n  const mcpPath = new URL(c.req.url).pathname;\n\n  await deps.auth.ensureUser(c);\n  const tenant = deps.auth.tenant(c);\n  if (!tenant) return unauthorized(deps, mcpPath);\n  if (!tenant.orgId) return c.json({ error: 'organization_required' }, 403);\n\n  const project = await deps.projects.get({ orgId: tenant.orgId, id: factoryProjectId });\n  if (!project) return c.json({ error: 'not_found' }, 404);\n\n  const { sessionId, persisted } = await ensureConnectorSession(deps, {\n    orgId: tenant.orgId,\n    userId: tenant.userId,\n    factoryProjectId,\n  });\n  const actorProfile = auditActorProfile(getFactoryAuthUser(c));\n  const scope: FactoryToolScope = {\n    orgId: tenant.orgId,\n    factoryProjectId,\n    userId: tenant.userId,\n    sessionId,\n    resourceId: sessionId,\n    threadId: sessionId,\n    kind: 'user',\n    // A signed-in person is driving the client: the same reach as a web UI turn.\n    interactive: true,\n    ...(actorProfile ? { actorProfile } : {}),\n  };\n\n  const server = new MCPServer({\n    id: `factory-${factoryProjectId}`,\n    name: `${project.name ?? 'Mastra'} Factory`,\n    version: deps.version ?? '1.0.0',\n    description: 'Manage work items, sessions and decisions in a Mastra Factory.',\n    tools: createFactoryMcpTools(scope, deps, { persistedSession: persisted }),\n  });\n\n  const { req, res } = toReqRes(c.req.raw);\n  const done = server\n    .startHTTP({ url: new URL(c.req.url), httpPath: mcpPath, req, res })\n    .catch(() => {\n      if (!res.headersSent) {\n        res.writeHead(500, { 'Content-Type': 'application/json' });\n        res.end(\n          JSON.stringify({ jsonrpc: '2.0', error: { code: -32603, message: 'Internal server error' }, id: null }),\n        );\n      }\n    })\n    .finally(() => void server.close());\n  const response = propagateClientDisconnect(await toFetchResponse(res), res);\n  if (res.writableEnded) await done;\n  return response;\n}\n\n/**\n * The Factory's MCP endpoint: Streamable HTTP at\n * `/web/factory/projects/:projectId/mcp`, plus its RFC 9728 protected-resource\n * metadata. Callers sign in with OAuth through the Factory's auth provider and\n * get the tools a web UI session would, under the same permissions.\n */\nexport function buildFactoryMcpRoutes(deps: FactoryMcpRoutesDeps): ApiRoute[] {\n  const handler = (c: unknown) => handleMcp(deps, c as Context);\n  return [\n    ...(['POST', 'GET', 'DELETE'] as const).map(method =>\n      registerApiRoute(FACTORY_MCP_PATH, { method, requiresAuth: false, handler }),\n    ),\n    registerApiRoute(`${PROTECTED_RESOURCE_PREFIX}${FACTORY_MCP_PATH}`, {\n      method: 'GET',\n      requiresAuth: false,\n      handler: c => {\n        const mcpPath = new URL(c.req.url).pathname.slice(PROTECTED_RESOURCE_PREFIX.length);\n        return c.json({\n          resource: `${deps.publicOrigin}${mcpPath}`,\n          authorization_servers: deps.authorizationServers,\n          bearer_methods_supported: ['header'],\n          resource_name: 'Mastra Factory',\n        });\n      },\n    }),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;AAuBA,MAAa,mBAAmB;AAChC,MAAM,4BAA4B;;;;;AAMlC,MAAM,iCAAiB,IAAI,IAAI,CAAC,wBAAwB,CAAC;;AAgBzD,MAAa,oCAAoC;AAEjD,SAAgB,+BACd,cACA,QACA,MAA0C,QAAQ,KACxC;CACV,IAAI,QAAQ,sBAAsB,QAAQ,OAAO,OAAO;CACxD,MAAM,UAAU,IAAI,yCAAyC,KAAK;CAClE,IAAI,SAAS,OAAO,CAAC,OAAO;CAC5B,IAAI,iBAAA,iBAAyC,OAAO,CAAC,iCAAiC;CACtF,OAAO,CAAC;AACV;;AAcA,SAAgB,mBAAmB,OAAe,QAAgB,kBAAkC;CAClG,MAAM,MAAM,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,MAAM,IAAI,OAAO,IAAI,kBAAkB,CAAC,CAAC,OAAO,KAAK;CACrG,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE;AAC/G;;;;;;;AAQA,eAAe,uBACb,MACA,MACoD;CACpD,MAAM,YAAY,mBAAmB,KAAK,OAAO,KAAK,QAAQ,KAAK,gBAAgB;CACnF,IAAI,MAAM,KAAK,MAAM,SAAS,eAAe,SAAS,GAAG,OAAO;EAAE;EAAW,WAAW;CAAK;CAC7F,KAAK,MAAM,iBAAiB,KAAK,gBAC/B,IAAI;EACF,MAAM,2BAA2B;GAC/B;GACA,OAAO,KAAK;GACZ,kBAAkB,KAAK;GACvB,QAAQ,eAAe,UAAU,MAAM,GAAG,CAAC;GAC3C,mBAAmB,KAAK;GACxB;GACA,YAAY;EACd,CAAC;EACD,OAAO;GAAE;GAAW,WAAW;EAAK;CACtC,SAAS,OAAO;EACd,IAAI,EAAE,iBAAiB,sCAAsC,MAAM;CACrE;CAEF,OAAO;EAAE;EAAW,WAAW;CAAM;AACvC;AAEA,SAAS,YAAY,cAAsB,kBAA0B,YAA4B;CAC/F,OAAO,GAAG,aAAa,WAAW,mBAAmB,gBAAgB,EAAE,cAAc,mBAAmB,UAAU;AACpH;;;;;AAMA,SAAS,uBACP,OACA,MACA,SAC0C;CAC1C,MAAM,UAAU;EAAE,OAAO,MAAM;EAAO,kBAAkB,MAAM;CAAiB;CAC/E,OAAO;EACL,QAAQ,WAAW;GACjB,IAAI;GACJ,aACE;GACF,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wCAAwC,EAAE,CAAC;GAC9F,SAAS,OAAO,EAAE,YAAY;IAC5B,MAAM,QAAQ,MAAM,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO;IAa7D,OAAO,EAAE,UAXO,MADI,KAAK,MAAM,UAAU,KAAK,OAAO,EAAA,CAElD,QAAO,SAAQ;KACd,MAAM,WAAW,GAAG,KAAK,GAAG,GAAG,KAAK,QAAQ,YAAY;KACxD,OAAO,MAAM,OAAM,SAAQ,SAAS,SAAS,IAAI,CAAC;IACpD,CAAC,CAAC,CACD,MAAM,GAAG,EAAE,CAAC,CACZ,KAAI,UAAS;KACZ,IAAI,KAAK;KACT,OAAO,KAAK;KACZ,KAAK,YAAY,KAAK,cAAc,MAAM,kBAAkB,KAAK,EAAE;IACrE,EACa,EAAE;GACnB;EACF,CAAC;EACD,OAAO,WAAW;GAChB,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS,eAAe,EAAE,CAAC;GAClE,SAAS,OAAO,EAAE,MAAM,YAAY;IAClC,IAAI,CAAC,SAAS,SAAS,MAAM,IAAI,MAAM,oCAAoC;IAC3E,MAAM,UAAW,MAAM,QAAQ,QAAQ,EAAE,UAAU,GAAG,GAAG,OAAO;IAChE,OAAO;KACL;KACA,OAAO,QAAQ,MAAM,SAAS;KAC9B,MAAM,KAAK,UAAU,SAAS,MAAM,CAAC;KACrC,KAAK,YAAY,KAAK,cAAc,MAAM,kBAAkB,EAAE;KAC9D,UAAU,EAAE,kBAAkB,MAAM,iBAAiB;IACvD;GACF;EACF,CAAC;CACH;AACF;;AAGA,SAAgB,sBACd,OACA,MACA,UAA0C,CAAC,GACD;CAC1C,MAAM,eAAe,mBAAmB;EAAE;EAAO,MAAM,KAAK;CAAM,CAAC;CACnE,MAAM,QAAkD,CAAC;CACzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,YAAY,GAAG;EACvD,IAAI,eAAe,IAAI,IAAI,GAAG;EAE9B,IAAI,SAAS,2BAA2B,QAAQ,qBAAqB,OAAO;EAC5E,MAAM,QAAQ;CAChB;CACA,OAAO,OAAO,OAAO,uBAAuB,OAAO,MAAM,aAAa,yBAAyB,CAAC;CAChG,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,cAAc,yBAAyB;EAC7C,IAAI,aAAa,KAAK,MAAM;GAAE,GAAG,KAAK;GAAK;EAAY;CACzD;CACA,OAAO;AACT;AAEA,SAAS,oBAAoB,MAA4B,SAAyB;CAChF,OAAO,GAAG,KAAK,eAAe,4BAA4B;AAC5D;AAEA,SAAS,aAAa,MAA4B,SAAiB,QAAQ,gBAA0B;CACnG,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC,GAAG;EAC7C,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,oBAAoB,6BAA6B,oBAAoB,MAAM,OAAO,EAAE;EACtF;CACF,CAAC;AACH;AAEA,eAAe,UAAU,MAA4B,GAA+B;CAClF,MAAM,mBAAmB,EAAE,IAAI,MAAM,WAAW,KAAK;CACrD,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;CAEnC,MAAM,KAAK,KAAK,WAAW,CAAC;CAC5B,MAAM,SAAS,KAAK,KAAK,OAAO,CAAC;CACjC,IAAI,CAAC,QAAQ,OAAO,aAAa,MAAM,OAAO;CAC9C,IAAI,CAAC,OAAO,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CAExE,MAAM,UAAU,MAAM,KAAK,SAAS,IAAI;EAAE,OAAO,OAAO;EAAO,IAAI;CAAiB,CAAC;CACrF,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;CAEvD,MAAM,EAAE,WAAW,cAAc,MAAM,uBAAuB,MAAM;EAClE,OAAO,OAAO;EACd,QAAQ,OAAO;EACf;CACF,CAAC;CACD,MAAM,eAAe,kBAAkB,mBAAmB,CAAC,CAAC;CAC5D,MAAM,QAA0B;EAC9B,OAAO,OAAO;EACd;EACA,QAAQ,OAAO;EACf;EACA,YAAY;EACZ,UAAU;EACV,MAAM;EAEN,aAAa;EACb,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;CACzC;CAEA,MAAM,SAAS,IAAI,UAAU;EAC3B,IAAI,WAAW;EACf,MAAM,GAAG,QAAQ,QAAQ,SAAS;EAClC,SAAS,KAAK,WAAW;EACzB,aAAa;EACb,OAAO,sBAAsB,OAAO,MAAM,EAAE,kBAAkB,UAAU,CAAC;CAC3E,CAAC;CAED,MAAM,EAAE,KAAK,QAAQ,SAAS,EAAE,IAAI,GAAG;CACvC,MAAM,OAAO,OACV,UAAU;EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,GAAG;EAAG,UAAU;EAAS;EAAK;CAAI,CAAC,CAAC,CACnE,YAAY;EACX,IAAI,CAAC,IAAI,aAAa;GACpB,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IACF,KAAK,UAAU;IAAE,SAAS;IAAO,OAAO;KAAE,MAAM;KAAQ,SAAS;IAAwB;IAAG,IAAI;GAAK,CAAC,CACxG;EACF;CACF,CAAC,CAAC,CACD,cAAc,KAAK,OAAO,MAAM,CAAC;CACpC,MAAM,WAAW,0BAA0B,MAAM,gBAAgB,GAAG,GAAG,GAAG;CAC1E,IAAI,IAAI,eAAe,MAAM;CAC7B,OAAO;AACT;;;;;;;AAQA,SAAgB,sBAAsB,MAAwC;CAC5E,MAAM,WAAW,MAAe,UAAU,MAAM,CAAY;CAC5D,OAAO,CACL,GAAI;EAAC;EAAQ;EAAO;CAAQ,CAAC,CAAW,KAAI,WAC1C,iBAAiB,kBAAkB;EAAE;EAAQ,cAAc;EAAO;CAAQ,CAAC,CAC7E,GACA,iBAAiB,GAAG,4BAA4B,oBAAoB;EAClE,QAAQ;EACR,cAAc;EACd,UAAS,MAAK;GACZ,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,EAAgC;GAClF,OAAO,EAAE,KAAK;IACZ,UAAU,GAAG,KAAK,eAAe;IACjC,uBAAuB,KAAK;IAC5B,0BAA0B,CAAC,QAAQ;IACnC,eAAe;GACjB,CAAC;EACH;CACF,CAAC,CACH;AACF"}
+{"version":3,"file":"routes.js","names":[],"sources":["../../src/mcp/routes.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport { createTool } from '@mastra/core/tools';\nimport type { Tool } from '@mastra/core/tools';\nimport { MCPServer } from '@mastra/mcp';\nimport { toFetchResponse, toReqRes } from 'fetch-to-node';\nimport type { Context } from 'hono';\nimport { z } from 'zod';\n\nimport { getFactoryAuthUser } from '../auth.js';\nimport { PLATFORM_AUTH_PROVIDER } from '../platform-auth-host.js';\nimport type { RouteAuth } from '../routes/route.js';\nimport { ensureFactorySourceSession, FactorySourceSessionResolutionError } from '../session/factory-session.js';\nimport { auditActorProfile } from '../storage/domains/audit/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { FACTORY_TOOL_ANNOTATIONS } from '../tools/annotations.js';\nimport { createFactoryTools } from '../tools/index.js';\nimport type { FactoryToolDependencies, FactoryToolScope } from '../tools/index.js';\nimport { propagateClientDisconnect } from './disconnect.js';\nimport { factoryActivityEvent } from './events.js';\n\nexport const FACTORY_MCP_PATH = '/web/factory/projects/:projectId/mcp';\nconst PROTECTED_RESOURCE_PREFIX = '/.well-known/oauth-protected-resource';\n\n/**\n * Tools an MCP client never gets. `factory_message_origin` answers the session\n * that started this one; a connector session is started by a person, not a session.\n */\nconst EXCLUDED_TOOLS = new Set(['factory_message_origin']);\n\nexport interface FactoryMcpConfig {\n  /** Serve the MCP endpoint. Default `true`; it is never served without an auth provider. */\n  enabled?: boolean;\n  /**\n   * OAuth authorization servers advertised in the protected-resource metadata\n   * (RFC 9728) so clients like ChatGPT know where to sign in. Defaults to the\n   * `MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER` env var, then to Mastra Platform's\n   * AuthKit when the Factory uses Platform auth. The endpoint isn't served\n   * without one, since clients would have nowhere to sign in.\n   */\n  authorizationServers?: string[];\n}\n\n/**\n * MCP requires a server version. The Factory doesn't expose its package\n * version at runtime, so this versions the endpoint's interface instead.\n */\nconst FACTORY_MCP_SERVER_VERSION = '1.0.0';\n\n/** What a connected client is told the server is for and where to start. */\nconst FACTORY_MCP_INSTRUCTIONS = [\n  'A Mastra Factory tracks software work as work items on a board; agent sessions plan and build them.',\n  'Start with `factory_list_attention` for what needs a person, or `search` and `fetch` to find a work item.',\n  'Work item tools file, update, move and follow items; session tools start, message and follow the agent sessions working on them.',\n  'Every call runs as the signed-in user. When the Factory has a repository, session tools act from a private connector session of theirs.',\n].join(' ');\n\n/** Mastra Platform's WorkOS AuthKit, which issues tokens Platform's `/auth/verify` accepts. */\nexport const PLATFORM_MCP_AUTHORIZATION_SERVER = 'https://auth-kit.mastra.ai';\n\nexport function resolveMcpAuthorizationServers(\n  providerName: string | undefined,\n  config: FactoryMcpConfig | undefined,\n  env: Record<string, string | undefined> = process.env,\n): string[] {\n  if (config?.authorizationServers?.length) return config.authorizationServers;\n  const fromEnv = env.MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER?.trim();\n  if (fromEnv) return [fromEnv];\n  if (providerName === PLATFORM_AUTH_PROVIDER) return [PLATFORM_MCP_AUTHORIZATION_SERVER];\n  return [];\n}\n\nexport interface FactoryMcpRoutesDeps {\n  auth: RouteAuth;\n  publicOrigin: string;\n  authorizationServers: string[];\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  /** Source-control handles a connector session can be filed under, tried in order. */\n  sourceControls: readonly SourceControlStorageHandle[];\n  tools: FactoryToolDependencies;\n}\n\n/** The connector session a user's MCP client acts from: one per user and Factory, stable across requests. */\nexport function connectorSessionId(orgId: string, userId: string, factoryProjectId: string): string {\n  const hex = createHash('sha256').update(`mcp\\0${orgId}\\0${userId}\\0${factoryProjectId}`).digest('hex');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-5${hex.slice(13, 16)}-8${hex.slice(17, 20)}-${hex.slice(20, 32)}`;\n}\n\n/**\n * Get or create the private user session behind a person's MCP client, so\n * session-scoped tools (start/signal sessions, follow work items) have a real\n * session to act from. A Factory without a connected repository has nowhere to\n * file one; its tools still run against the stable id.\n */\nasync function ensureConnectorSession(\n  deps: FactoryMcpRoutesDeps,\n  args: { orgId: string; userId: string; factoryProjectId: string },\n): Promise<{ sessionId: string; persisted: boolean }> {\n  const sessionId = connectorSessionId(args.orgId, args.userId, args.factoryProjectId);\n  if (await deps.tools.sessions.getBySessionId(sessionId)) return { sessionId, persisted: true };\n  for (const sourceControl of deps.sourceControls) {\n    try {\n      await ensureFactorySourceSession({\n        sourceControl,\n        orgId: args.orgId,\n        factoryProjectId: args.factoryProjectId,\n        branch: `factory/mcp-${sessionId.slice(0, 8)}`,\n        attributeToUserId: args.userId,\n        sessionId,\n        visibility: 'private',\n      });\n      return { sessionId, persisted: true };\n    } catch (error) {\n      if (!(error instanceof FactorySourceSessionResolutionError)) throw error;\n    }\n  }\n  return { sessionId, persisted: false };\n}\n\nfunction workItemUrl(publicOrigin: string, factoryProjectId: string, workItemId: string): string {\n  return `${publicOrigin}/factory/${encodeURIComponent(factoryProjectId)}/work-items/${encodeURIComponent(workItemId)}`;\n}\n\n/**\n * `search` and `fetch`, the two tools ChatGPT's connectors and deep research\n * look for, answered from the Factory's work items.\n */\nfunction createSearchFetchTools(\n  scope: FactoryToolScope,\n  deps: FactoryMcpRoutesDeps,\n  inspect: Tool<any, any, any, any> | undefined,\n): Record<string, Tool<any, any, any, any>> {\n  const project = { orgId: scope.orgId, factoryProjectId: scope.factoryProjectId };\n  return {\n    search: createTool({\n      id: 'search',\n      description:\n        'Search this Factory’s work items by title or id. Returns matching items with ids to pass to `fetch`.',\n      inputSchema: z.object({ query: z.string().describe('Words to look for in work item titles.') }),\n      execute: async ({ query }) => {\n        const terms = query.toLowerCase().split(/\\s+/).filter(Boolean);\n        const items = await deps.tools.workItems.list(project);\n        const results = items\n          .filter(item => {\n            const haystack = `${item.id} ${item.title}`.toLowerCase();\n            return terms.every(term => haystack.includes(term));\n          })\n          .slice(0, 20)\n          .map(item => ({\n            id: item.id,\n            title: item.title,\n            url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, item.id),\n          }));\n        return { results };\n      },\n    }),\n    fetch: createTool({\n      id: 'fetch',\n      description: 'Fetch everything the Factory knows about one work item, by the id `search` returned.',\n      inputSchema: z.object({ id: z.string().describe('Work item id.') }),\n      execute: async ({ id }, context) => {\n        if (!inspect?.execute) throw new Error('Work item details are unavailable.');\n        const details = (await inspect.execute({ workItem: id }, context)) as { item?: { title?: string } };\n        return {\n          id,\n          title: details.item?.title ?? id,\n          text: JSON.stringify(details, null, 2),\n          url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, id),\n          metadata: { factoryProjectId: scope.factoryProjectId },\n        };\n      },\n    }),\n  };\n}\n\n/** The tools a signed-in person's MCP client sees for one Factory. */\nexport function createFactoryMcpTools(\n  scope: FactoryToolScope,\n  deps: FactoryMcpRoutesDeps,\n  options: { persistedSession?: boolean } = {},\n): Record<string, Tool<any, any, any, any>> {\n  const factoryTools = createFactoryTools({ scope, deps: deps.tools }) as Record<string, Tool<any, any, any, any>>;\n  const tools: Record<string, Tool<any, any, any, any>> = {};\n  for (const [name, tool] of Object.entries(factoryTools)) {\n    if (EXCLUDED_TOOLS.has(name)) continue;\n    // Starting a sub-session needs a real parent session row to file it under.\n    if (name === 'factory_start_session' && options.persistedSession === false) continue;\n    tools[name] = tool;\n  }\n  Object.assign(tools, createSearchFetchTools(scope, deps, factoryTools.factory_inspect_work_item));\n  for (const [name, tool] of Object.entries(tools)) {\n    const annotations = FACTORY_TOOL_ANNOTATIONS[name];\n    if (annotations) tool.mcp = { ...tool.mcp, annotations };\n  }\n  return tools;\n}\n\nfunction resourceMetadataUrl(deps: FactoryMcpRoutesDeps, mcpPath: string): string {\n  return `${deps.publicOrigin}${PROTECTED_RESOURCE_PREFIX}${mcpPath}`;\n}\n\nfunction unauthorized(deps: FactoryMcpRoutesDeps, mcpPath: string, error = 'unauthorized'): Response {\n  return new Response(JSON.stringify({ error }), {\n    status: 401,\n    headers: {\n      'Content-Type': 'application/json',\n      'WWW-Authenticate': `Bearer resource_metadata=\"${resourceMetadataUrl(deps, mcpPath)}\"`,\n    },\n  });\n}\n\nasync function handleMcp(deps: FactoryMcpRoutesDeps, c: Context): Promise<Response> {\n  const factoryProjectId = c.req.param('projectId') ?? '';\n  const mcpPath = new URL(c.req.url).pathname;\n\n  await deps.auth.ensureUser(c);\n  const tenant = deps.auth.tenant(c);\n  if (!tenant) return unauthorized(deps, mcpPath);\n  if (!tenant.orgId) return c.json({ error: 'organization_required' }, 403);\n\n  const project = await deps.projects.get({ orgId: tenant.orgId, id: factoryProjectId });\n  if (!project) return c.json({ error: 'not_found' }, 404);\n\n  const { sessionId, persisted } = await ensureConnectorSession(deps, {\n    orgId: tenant.orgId,\n    userId: tenant.userId,\n    factoryProjectId,\n  });\n  const actorProfile = auditActorProfile(getFactoryAuthUser(c));\n  const scope: FactoryToolScope = {\n    orgId: tenant.orgId,\n    factoryProjectId,\n    userId: tenant.userId,\n    sessionId,\n    // A user session's memory lives under its owner.\n    resourceId: tenant.userId,\n    threadId: sessionId,\n    kind: 'user',\n    // A signed-in person is driving the client: the same reach as a web UI turn.\n    interactive: true,\n    ...(actorProfile ? { actorProfile } : {}),\n  };\n\n  const server = new MCPServer({\n    id: `factory-${factoryProjectId}`,\n    name: `${project.name ?? 'Mastra'} Factory`,\n    version: FACTORY_MCP_SERVER_VERSION,\n    description: 'Manage work items, sessions and decisions in a Mastra Factory.',\n    instructions: FACTORY_MCP_INSTRUCTIONS,\n    // VS Code and Cursor still open with 2025-era `initialize`; serve them statelessly.\n    legacy: 'stateless',\n    tools: createFactoryMcpTools(scope, deps, { persistedSession: persisted }),\n    events: {\n      'factory.activity': factoryActivityEvent({\n        orgId: tenant.orgId,\n        factoryProjectId,\n        audit: deps.tools.audit,\n        workItems: deps.tools.workItems,\n        sessions: deps.tools.sessions,\n        viewer: { orgId: tenant.orgId, userId: tenant.userId },\n      }),\n    },\n  });\n\n  const { req, res } = toReqRes(c.req.raw);\n  const done = server\n    .startHTTP({ url: new URL(c.req.url), httpPath: mcpPath, req, res })\n    .catch(error => {\n      console.warn('[factory] MCP request failed:', error);\n      if (!res.headersSent) {\n        res.writeHead(500, { 'Content-Type': 'application/json' });\n        res.end(\n          JSON.stringify({ jsonrpc: '2.0', error: { code: -32603, message: 'Internal server error' }, id: null }),\n        );\n      }\n    })\n    .finally(() => void server.close());\n  const response = propagateClientDisconnect(await toFetchResponse(res), res);\n  if (res.writableEnded) await done;\n  return response;\n}\n\n/**\n * The Factory's MCP endpoint: Streamable HTTP at\n * `/web/factory/projects/:projectId/mcp`, plus its RFC 9728 protected-resource\n * metadata. Callers sign in with OAuth through the Factory's auth provider and\n * get the tools a web UI session would, under the same permissions.\n */\nexport function buildFactoryMcpRoutes(deps: FactoryMcpRoutesDeps): ApiRoute[] {\n  const handler = (c: unknown) => handleMcp(deps, c as Context);\n  return [\n    ...(['POST', 'GET', 'DELETE'] as const).map(method =>\n      registerApiRoute(FACTORY_MCP_PATH, { method, requiresAuth: false, handler }),\n    ),\n    registerApiRoute(`${PROTECTED_RESOURCE_PREFIX}${FACTORY_MCP_PATH}`, {\n      method: 'GET',\n      requiresAuth: false,\n      handler: c => {\n        const mcpPath = new URL(c.req.url).pathname.slice(PROTECTED_RESOURCE_PREFIX.length);\n        return c.json({\n          resource: `${deps.publicOrigin}${mcpPath}`,\n          authorization_servers: deps.authorizationServers,\n          bearer_methods_supported: ['header'],\n          resource_name: 'Mastra Factory',\n        });\n      },\n    }),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;AAwBA,MAAa,mBAAmB;AAChC,MAAM,4BAA4B;;;;;AAMlC,MAAM,iCAAiB,IAAI,IAAI,CAAC,wBAAwB,CAAC;;;;;AAmBzD,MAAM,6BAA6B;;AAGnC,MAAM,2BAA2B;CAC/B;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,MAAa,oCAAoC;AAEjD,SAAgB,+BACd,cACA,QACA,MAA0C,QAAQ,KACxC;CACV,IAAI,QAAQ,sBAAsB,QAAQ,OAAO,OAAO;CACxD,MAAM,UAAU,IAAI,yCAAyC,KAAK;CAClE,IAAI,SAAS,OAAO,CAAC,OAAO;CAC5B,IAAI,iBAAA,iBAAyC,OAAO,CAAC,iCAAiC;CACtF,OAAO,CAAC;AACV;;AAaA,SAAgB,mBAAmB,OAAe,QAAgB,kBAAkC;CAClG,MAAM,MAAM,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,MAAM,IAAI,OAAO,IAAI,kBAAkB,CAAC,CAAC,OAAO,KAAK;CACrG,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE;AAC/G;;;;;;;AAQA,eAAe,uBACb,MACA,MACoD;CACpD,MAAM,YAAY,mBAAmB,KAAK,OAAO,KAAK,QAAQ,KAAK,gBAAgB;CACnF,IAAI,MAAM,KAAK,MAAM,SAAS,eAAe,SAAS,GAAG,OAAO;EAAE;EAAW,WAAW;CAAK;CAC7F,KAAK,MAAM,iBAAiB,KAAK,gBAC/B,IAAI;EACF,MAAM,2BAA2B;GAC/B;GACA,OAAO,KAAK;GACZ,kBAAkB,KAAK;GACvB,QAAQ,eAAe,UAAU,MAAM,GAAG,CAAC;GAC3C,mBAAmB,KAAK;GACxB;GACA,YAAY;EACd,CAAC;EACD,OAAO;GAAE;GAAW,WAAW;EAAK;CACtC,SAAS,OAAO;EACd,IAAI,EAAE,iBAAiB,sCAAsC,MAAM;CACrE;CAEF,OAAO;EAAE;EAAW,WAAW;CAAM;AACvC;AAEA,SAAS,YAAY,cAAsB,kBAA0B,YAA4B;CAC/F,OAAO,GAAG,aAAa,WAAW,mBAAmB,gBAAgB,EAAE,cAAc,mBAAmB,UAAU;AACpH;;;;;AAMA,SAAS,uBACP,OACA,MACA,SAC0C;CAC1C,MAAM,UAAU;EAAE,OAAO,MAAM;EAAO,kBAAkB,MAAM;CAAiB;CAC/E,OAAO;EACL,QAAQ,WAAW;GACjB,IAAI;GACJ,aACE;GACF,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wCAAwC,EAAE,CAAC;GAC9F,SAAS,OAAO,EAAE,YAAY;IAC5B,MAAM,QAAQ,MAAM,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO;IAa7D,OAAO,EAAE,UAXO,MADI,KAAK,MAAM,UAAU,KAAK,OAAO,EAAA,CAElD,QAAO,SAAQ;KACd,MAAM,WAAW,GAAG,KAAK,GAAG,GAAG,KAAK,QAAQ,YAAY;KACxD,OAAO,MAAM,OAAM,SAAQ,SAAS,SAAS,IAAI,CAAC;IACpD,CAAC,CAAC,CACD,MAAM,GAAG,EAAE,CAAC,CACZ,KAAI,UAAS;KACZ,IAAI,KAAK;KACT,OAAO,KAAK;KACZ,KAAK,YAAY,KAAK,cAAc,MAAM,kBAAkB,KAAK,EAAE;IACrE,EACa,EAAE;GACnB;EACF,CAAC;EACD,OAAO,WAAW;GAChB,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS,eAAe,EAAE,CAAC;GAClE,SAAS,OAAO,EAAE,MAAM,YAAY;IAClC,IAAI,CAAC,SAAS,SAAS,MAAM,IAAI,MAAM,oCAAoC;IAC3E,MAAM,UAAW,MAAM,QAAQ,QAAQ,EAAE,UAAU,GAAG,GAAG,OAAO;IAChE,OAAO;KACL;KACA,OAAO,QAAQ,MAAM,SAAS;KAC9B,MAAM,KAAK,UAAU,SAAS,MAAM,CAAC;KACrC,KAAK,YAAY,KAAK,cAAc,MAAM,kBAAkB,EAAE;KAC9D,UAAU,EAAE,kBAAkB,MAAM,iBAAiB;IACvD;GACF;EACF,CAAC;CACH;AACF;;AAGA,SAAgB,sBACd,OACA,MACA,UAA0C,CAAC,GACD;CAC1C,MAAM,eAAe,mBAAmB;EAAE;EAAO,MAAM,KAAK;CAAM,CAAC;CACnE,MAAM,QAAkD,CAAC;CACzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,YAAY,GAAG;EACvD,IAAI,eAAe,IAAI,IAAI,GAAG;EAE9B,IAAI,SAAS,2BAA2B,QAAQ,qBAAqB,OAAO;EAC5E,MAAM,QAAQ;CAChB;CACA,OAAO,OAAO,OAAO,uBAAuB,OAAO,MAAM,aAAa,yBAAyB,CAAC;CAChG,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,cAAc,yBAAyB;EAC7C,IAAI,aAAa,KAAK,MAAM;GAAE,GAAG,KAAK;GAAK;EAAY;CACzD;CACA,OAAO;AACT;AAEA,SAAS,oBAAoB,MAA4B,SAAyB;CAChF,OAAO,GAAG,KAAK,eAAe,4BAA4B;AAC5D;AAEA,SAAS,aAAa,MAA4B,SAAiB,QAAQ,gBAA0B;CACnG,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC,GAAG;EAC7C,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,oBAAoB,6BAA6B,oBAAoB,MAAM,OAAO,EAAE;EACtF;CACF,CAAC;AACH;AAEA,eAAe,UAAU,MAA4B,GAA+B;CAClF,MAAM,mBAAmB,EAAE,IAAI,MAAM,WAAW,KAAK;CACrD,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;CAEnC,MAAM,KAAK,KAAK,WAAW,CAAC;CAC5B,MAAM,SAAS,KAAK,KAAK,OAAO,CAAC;CACjC,IAAI,CAAC,QAAQ,OAAO,aAAa,MAAM,OAAO;CAC9C,IAAI,CAAC,OAAO,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CAExE,MAAM,UAAU,MAAM,KAAK,SAAS,IAAI;EAAE,OAAO,OAAO;EAAO,IAAI;CAAiB,CAAC;CACrF,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;CAEvD,MAAM,EAAE,WAAW,cAAc,MAAM,uBAAuB,MAAM;EAClE,OAAO,OAAO;EACd,QAAQ,OAAO;EACf;CACF,CAAC;CACD,MAAM,eAAe,kBAAkB,mBAAmB,CAAC,CAAC;CAC5D,MAAM,QAA0B;EAC9B,OAAO,OAAO;EACd;EACA,QAAQ,OAAO;EACf;EAEA,YAAY,OAAO;EACnB,UAAU;EACV,MAAM;EAEN,aAAa;EACb,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;CACzC;CAEA,MAAM,SAAS,IAAI,UAAU;EAC3B,IAAI,WAAW;EACf,MAAM,GAAG,QAAQ,QAAQ,SAAS;EAClC,SAAS;EACT,aAAa;EACb,cAAc;EAEd,QAAQ;EACR,OAAO,sBAAsB,OAAO,MAAM,EAAE,kBAAkB,UAAU,CAAC;EACzE,QAAQ,EACN,oBAAoB,qBAAqB;GACvC,OAAO,OAAO;GACd;GACA,OAAO,KAAK,MAAM;GAClB,WAAW,KAAK,MAAM;GACtB,UAAU,KAAK,MAAM;GACrB,QAAQ;IAAE,OAAO,OAAO;IAAO,QAAQ,OAAO;GAAO;EACvD,CAAC,EACH;CACF,CAAC;CAED,MAAM,EAAE,KAAK,QAAQ,SAAS,EAAE,IAAI,GAAG;CACvC,MAAM,OAAO,OACV,UAAU;EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,GAAG;EAAG,UAAU;EAAS;EAAK;CAAI,CAAC,CAAC,CACnE,OAAM,UAAS;EACd,QAAQ,KAAK,iCAAiC,KAAK;EACnD,IAAI,CAAC,IAAI,aAAa;GACpB,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IACF,KAAK,UAAU;IAAE,SAAS;IAAO,OAAO;KAAE,MAAM;KAAQ,SAAS;IAAwB;IAAG,IAAI;GAAK,CAAC,CACxG;EACF;CACF,CAAC,CAAC,CACD,cAAc,KAAK,OAAO,MAAM,CAAC;CACpC,MAAM,WAAW,0BAA0B,MAAM,gBAAgB,GAAG,GAAG,GAAG;CAC1E,IAAI,IAAI,eAAe,MAAM;CAC7B,OAAO;AACT;;;;;;;AAQA,SAAgB,sBAAsB,MAAwC;CAC5E,MAAM,WAAW,MAAe,UAAU,MAAM,CAAY;CAC5D,OAAO,CACL,GAAI;EAAC;EAAQ;EAAO;CAAQ,CAAC,CAAW,KAAI,WAC1C,iBAAiB,kBAAkB;EAAE;EAAQ,cAAc;EAAO;CAAQ,CAAC,CAC7E,GACA,iBAAiB,GAAG,4BAA4B,oBAAoB;EAClE,QAAQ;EACR,cAAc;EACd,UAAS,MAAK;GACZ,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,EAAgC;GAClF,OAAO,EAAE,KAAK;IACZ,UAAU,GAAG,KAAK,eAAe;IACjC,uBAAuB,KAAK;IAC5B,0BAA0B,CAAC,QAAQ;IACnC,eAAe;GACjB,CAAC;EACH;CACF,CAAC,CACH;AACF"}

package/dist/packages/_internals/workspace/dist/index.js

@@ -1,3 +1,5 @@
+import "@mastra/core/workspace";
+import "path";
 import { createHash } from "crypto";
 //#region ../../packages/_internals/workspace/dist/index.js
 /** Directory, relative to the template's build cwd, that holds every marker below. */
@@ -42,7 +44,22 @@ function normalizeSetupCommands(setupCommand) {
 function setupMarkerContent(setupCommand) {
 	return `sha256:${createHash("sha256").update(normalizeSetupCommands(setupCommand).join("\n")).digest("hex")}`;
 }
+/**
+* Shell scripts for the file operations a sandbox can only do atomically (or
+* without moving file bytes over the network) by running a command inside the
+* VM. Each builder takes absolute paths and returns one POSIX `sh` script; the
+* caller runs it with `sh -c` and maps the exit codes below to typed errors.
+*/
+/** Exit codes the scripts use for outcomes the caller turns into typed errors. Any other non-zero code is a plain failure. */
+const FILE_COMMAND_EXIT = {
+	notFound: 20,
+	isDirectory: 21,
+	exists: 22,
+	notDirectory: 23,
+	destIsDirectory: 24
+};
+const { notFound, isDirectory, exists, notDirectory, destIsDirectory } = FILE_COMMAND_EXIT;
 //#endregion
-export { SETUP_FAILED_MARKER_PATH, SETUP_MARKER_DIR, SETUP_MARKER_PATH, WORKSPACE_SETUP_MARKER_PATH, normalizeSetupCommands, repoSetupMarkerPath, setupMarkerContent };
+export { FILE_COMMAND_EXIT, SETUP_FAILED_MARKER_PATH, SETUP_MARKER_DIR, SETUP_MARKER_PATH, WORKSPACE_SETUP_MARKER_PATH, normalizeSetupCommands, repoSetupMarkerPath, setupMarkerContent };
 
 //# sourceMappingURL=index.js.map