@mastra/factory 0.24.0 → 0.25.0-alpha.1

package/dist/factory.js

@@ -1,5 +1,5 @@
 import { createRequestTimingMiddleware, factoryTimingEnabled, instrumentAsyncMethods, timedPhase } from "./timing.js";
-import { buildAuthDisabledRoutes, buildAuthRoutes, createFactoryAuthGate, createFactoryInteractiveMarker, createFactoryRouteAuth, factoryUserOrgId, getFactoryAuthOrgId, getFactoryAuthUserFromContext, getFactoryAuthUserId } from "./auth.js";
+import { buildAuthDisabledRoutes, buildAuthRoutes, createFactoryAuthGate, createFactoryInteractiveMarker, createFactoryRouteAuth, getFactoryAuthOrgId, getFactoryAuthUserFromContext, getFactoryAuthUserId } from "./auth.js";
 import { assertFactoryConfigVersion } from "./rules/validation.js";
 import { boardForWorkItem, isTerminalWorkItem } from "./boards/semantics.js";
 import { createBoardRegistry } from "./boards/registry.js";
@@ -25,6 +25,7 @@ import { observeSessionFilesystem } from "./session/filesystem-capture.js";
 import { sessionMemoryResourceId, sessionStampCounts } from "./session/session-threads.js";
 import { createPlaintextFactorySecretEncryption } from "./secret-encryption.js";
 import { ModelCredentialsStorage } from "./storage/domains/credentials/base.js";
+import { tenantOrgId } from "./routes/provider-credentials.js";
 import { createTenantCredentialPrimer, primeTenantCredentials, registerTenantCredentialResolver } from "./routes/tenant-credentials.js";
 import { hasResolvedOrg } from "./session/org-seed.js";
 import { createSessionAsRowOwner, prepareSessionRunContext } from "./integrations/subscription-session.js";
@@ -40,8 +41,8 @@ import { AuditStorage } from "./storage/domains/audit/base.js";
 import { resolveFactoryToolScope } from "./tools/scope.js";
 import { deliverFactorySessionNotification } from "./tools/deliver.js";
 import { createSessionApprovalNotifier, createSessionRunEndReporter, createStageChangeNotifier, createWorkItemRunEndReporter } from "./tools/reports.js";
-import { resolveFactoryCredentialTenant } from "./session/credential-policy.js";
-import { hydrateSessionMemorySettings, layerPersonalMemorySettings } from "./session/memory-settings-hydration.js";
+import { resolveFactoryCredentialTenant, resolveFactoryModelPolicy } from "./session/credential-policy.js";
+import { hydrateSessionMemorySettings } from "./session/memory-settings-hydration.js";
 import { MemorySettingsStorage, factoryMemorySettingsUserId } from "./storage/domains/memory-settings/base.js";
 import { resolveDeploymentModelProviders } from "./routes/config.js";
 import { observeSessionRunEnd } from "./session/run-audit.js";
@@ -66,15 +67,13 @@ import { createFactoryTransitionTools } from "./rules/tools.js";
 import { CallbackFactorySandbox } from "./sandbox/callback-factory-sandbox.js";
 import { SessionRetirementCoordinator } from "./sandbox/session-retirement.js";
 import { handleServerError } from "./server-error.js";
-import { FactoryChannelReplyProcessor } from "./session/channel-reply-processor.js";
-import { FactoryChannelSessionLinkProcessor } from "./session/channel-session-link-processor.js";
 import { hydrateSessionDefaultModel } from "./session/default-model-hydration.js";
 import { observeSessionFirstMessage } from "./session/first-message-capture.js";
 import { LiveSessions } from "./session/live-sessions.js";
 import { FactoryReplyCredentialProcessor } from "./session/reply-credential-processor.js";
 import { migrateSessionResources, privatizeOwnerResourceSessions } from "./session/resource-migration.js";
 import { createSourceControlTools } from "./session/source-control-tools.js";
-import { readFactoryThinkingLevel, resolveFactoryThinkingLevel } from "./session/thinking-default.js";
+import { resolveFactoryThinkingLevel } from "./session/thinking-default.js";
 import { observeSessionThreadStamp } from "./session/thread-session-stamp.js";
 import { observeSessionThreadTitle } from "./session/thread-title-mirror.js";
 import { createSpaStaticMiddleware, resolveUiDistDir } from "./spa-static.js";
@@ -87,6 +86,7 @@ import { CustomProvidersStorage } from "./storage/domains/custom-providers/base.
 import { FilesystemStorage } from "./storage/domains/filesystem/base.js";
 import { IntegrationStorage } from "./storage/domains/integrations/base.js";
 import { ModelDefaultsStorage } from "./storage/domains/model-defaults/base.js";
+import { createFactorySandboxTools } from "./tools/sandbox-tools.js";
 import { FactorySessionsStateProcessor } from "./tools/sessions-state-processor.js";
 import { RequestContext } from "@mastra/core/request-context";
 import { hasAuthInit, isUserProvider } from "@mastra/core/server";
@@ -118,6 +118,12 @@ import { describeFactorySandbox, isFactorySandbox } from "@mastra/core/workspace
 * and the storage domains those capabilities require.
 */
 const CONTROLLER_ID = "code";
+/**
+* Providers whose sandbox a session's agent may recreate itself. Each needs
+* its `destroy()` to leave the instance able to start a fresh VM, proven
+* against the real provider.
+*/
+const SELF_RECREATE_SANDBOX_PROVIDERS = /* @__PURE__ */ new Set(["platform"]);
 /** Why a wake couldn't be run as its Factory session's owner. */
 const WAKE_OWNER_UNRESOLVED = {
 	"session-not-found": "no Factory session row names its owner",
@@ -129,53 +135,18 @@ function hasPlatformCredentials() {
 }
 /**
 * Default auth provider — `MastraAuthStudio`, which proxies identity to the
-* shared Mastra platform API. `MastraAuthStudio` resolves `MASTRA_SHARED_API_URL`,
-* `MASTRA_ORGANIZATION_ID`, and `MASTRA_COOKIE_DOMAIN` from env on its own —
-* this helper only derives a cookie-domain fallback from the factory's
-* `publicUrl`.
-*
-* Cookie-domain resolution (Studio picks the first that wins):
-*   1. explicit `MASTRA_COOKIE_DOMAIN` env, if set;
-*   2. `.mastra.ai` when `sharedApiUrl` is on `.mastra.ai`;
-*   3. this parent-domain fallback derived from `publicUrl` — so a deploy on
-*      `https://foo.mastra.cloud` mints cookies with `Domain=.mastra.cloud`
-*      without the caller wiring the env var by hand.
-*   4. otherwise host-only (no `Domain=`), which is correct for `localhost`.
-*/
-function buildDefaultStudioAuth(publicUrl) {
-	return new MastraAuthStudio({ cookieDomain: parentDomainFromPublicUrl(publicUrl) });
-}
-/**
-* Derive a parent cookie domain from `publicUrl` by stripping the leftmost
-* label — the same shape platform-API's env injection uses (see
-* `platform/servers/api/src/lib/studio-env-vars.ts`: `.${routingDomain.replace(/^[^.]+\./, '')}`).
+* shared Mastra platform API and resolves its own env (`MASTRA_SHARED_API_URL`,
+* `MASTRA_ORGANIZATION_ID`, ...).
 *
-* Rather than a generic `strip-left-label` heuristic — which either emits
-* cookies scoped to a public suffix (`sub.example.co.uk` → `.example.co.uk`
-* requires PSL data to be safe) or misclassifies numeric hostnames like
-* `3scale.example.com` as IPv4 — we only derive a parent domain when the
-* host sits under one of the platform's known registrable domains. Anything
-* else (custom domains, arbitrary tenant hostnames, IPs, `localhost`)
-* falls through to host-only cookies. Callers that need a different scope
-* pass `MASTRA_COOKIE_DOMAIN` explicitly (Studio honors that first).
+* The session cookie is **host-only** (`__Host-wos-session` on secure
+* deployments). No parent `Domain` (e.g. `.mastra.cloud`) is derived from
+* `publicUrl`: a parent-scoped session cookie is sent by the browser to every
+* host under that parent, including other tenants' deployments. Callers that
+* really want a domain-scoped cookie pass their own `MastraAuthStudio` (with
+* `cookieDomain`) via `auth:`.
 */
-const KNOWN_PLATFORM_COOKIE_PARENTS = ["mastra.cloud", "mastra.ai"];
-function isIpLiteral(hostname) {
-	if (hostname.includes(":")) return true;
-	return /^\d+(?:\.\d+){3}$/.test(hostname);
-}
-function parentDomainFromPublicUrl(publicUrl) {
-	let hostname;
-	try {
-		hostname = new URL(publicUrl).hostname.toLowerCase();
-	} catch {
-		return;
-	}
-	if (hostname === "localhost" || isIpLiteral(hostname)) return void 0;
-	for (const parent of KNOWN_PLATFORM_COOKIE_PARENTS) {
-		if (hostname === parent) return void 0;
-		if (hostname.endsWith(`.${parent}`)) return `.${parent}`;
-	}
+function buildDefaultStudioAuth() {
+	return new MastraAuthStudio();
 }
 /** A session parking or being answered is inbox news, so the registry bumps the project's feed. */
 function liveSessionsTouchingTheFeed(controller, eventBus) {
@@ -265,13 +236,14 @@ var MastraFactory = class {
 		const pubsub = this.#config.pubsub;
 		const eventBus = pubsub ?? new EventEmitterPubSub();
 		const configuredAuth = this.#config.auth;
-		const auth = configuredAuth === null ? void 0 : configuredAuth ?? buildDefaultStudioAuth(publicOrigin);
+		const auth = configuredAuth === null ? void 0 : configuredAuth ?? buildDefaultStudioAuth();
 		if (auth && !this.#config.secretEncryption) console.warn("[factory] auth is enabled but 'secretEncryption' is not configured. Persisted model credentials, custom-provider API keys, and integration secrets will be stored as plaintext. Provide 'secretEncryption' (e.g. via FACTORY_CREDENTIAL_ENCRYPTION_KEY) to encrypt them at rest.");
 		const secretEncryption = this.#config.secretEncryption ?? createPlaintextFactorySecretEncryption();
 		const deploymentModelProviders = resolveDeploymentModelProviders(this.#config.deploymentModelProviders);
 		const routeAuth = createFactoryRouteAuth(auth);
 		const mcpConfig = this.#config.mcp;
 		const mcpAuthorizationServers = mcpConfig === false || mcpConfig?.enabled === false ? [] : resolveMcpAuthorizationServers(auth?.name, mcpConfig);
+		const mcpEnabled = Boolean(auth) && mcpAuthorizationServers.length > 0;
 		const integrations = [...this.#config.integrations ?? []];
 		const explicitGithub = integrations.some((integration) => integration.id === "github");
 		let installedPlatformGithub = false;
@@ -374,17 +346,19 @@ var MastraFactory = class {
 				projects: factoryProjectsStorage,
 				auth: routeAuth,
 				intake: intakeStorage,
-				...integrationSourceControl ? { sourceControl: integrationSourceControl } : {}
+				...integrationSourceControl ? { sourceControl: integrationSourceControl } : {},
+				channels: () => this.#prepared?.base.controller.getChannels()
 			});
 			if (integration.versionControl && integrationSourceControl) integration.versionControl.initialize({ storage: integrationSourceControl });
 		}
 		const sourceControlHandles = [.../* @__PURE__ */ new Set(["github", ...integrations.filter((integration) => integration.versionControl).map(({ id }) => id)])].map((id) => sourceControlStorage.forIntegration(id));
 		const sourceControlSessions = createSourceControlSessionLookup(sourceControlHandles);
-		if (auth) registerTenantCredentialResolver(modelCredentialsStorage, deploymentModelProviders, (requestContext) => resolveFactoryCredentialTenant(requestContext, {
+		const modelPolicyDependencies = {
 			projects: factoryProjectsStorage,
 			sourceControl: sourceControlSessions,
 			workItems: workItemsStorage
-		}));
+		};
+		if (auth) registerTenantCredentialResolver(modelCredentialsStorage, deploymentModelProviders, (requestContext) => resolveFactoryCredentialTenant(requestContext, modelPolicyDependencies));
 		const integrationRegistrations = integrations.map((integration) => {
 			const requiredDomains = [
 				"integrations",
@@ -659,41 +633,46 @@ var MastraFactory = class {
 				controller: { getSession: async (sessionId) => this.#prepared?.base.controller.getSession(sessionId) }
 			} : {}
 		});
-		const loadMemorySettings = async ({ requestContext, binding }) => {
-			if (!requestContext) return;
+		const memorySettingsRowKey = async (requestContext, binding) => {
+			const policy = auth ? await resolveFactoryModelPolicy(requestContext, modelPolicyDependencies) : void 0;
+			if (policy) {
+				const orgId = tenantOrgId(policy.tenant);
+				return policy.tenant.credentialScope === "factory" && policy.factoryProjectId ? {
+					orgId,
+					userId: factoryMemorySettingsUserId(policy.factoryProjectId)
+				} : {
+					orgId,
+					userId: policy.tenant.userId
+				};
+			}
 			const scope = readFactorySessionScope(requestContext);
-			const user = getFactoryAuthUserFromContext(requestContext);
-			const callerUserId = getFactoryAuthUserId(user);
-			const callerOrgId = factoryUserOrgId(user);
 			const factoryProjectId = binding?.factoryProjectId ?? scope?.factoryProjectId;
-			const target = factoryProjectId ? {
-				orgId: binding?.orgId ?? scope?.factoryOrgId ?? callerOrgId ?? "local",
-				userId: factoryMemorySettingsUserId(factoryProjectId)
-			} : callerUserId && callerOrgId ? {
-				orgId: callerOrgId,
-				userId: callerUserId
-			} : {
+			if (!factoryProjectId) return {
 				orgId: "local",
 				userId: "local"
 			};
-			const record = await memorySettingsStorage.get(target);
-			let personal = null;
-			if (factoryProjectId && requestContext.get("channel") && callerUserId && callerOrgId) try {
-				personal = await memorySettingsStorage.get({
-					orgId: callerOrgId,
-					userId: callerUserId
-				});
-			} catch (error) {
-				console.warn("[Factory Memory Settings] Unable to read the sender's memory settings", { error: error instanceof Error ? error.message : String(error) });
-			}
-			requestContext.set("mastra__factoryMemorySettings", layerPersonalMemorySettings(record, personal));
+			return {
+				orgId: binding?.orgId ?? scope?.factoryOrgId ?? "local",
+				userId: factoryMemorySettingsUserId(factoryProjectId)
+			};
+		};
+		const loadMemorySettings = async ({ requestContext, binding }) => {
+			if (!requestContext) return;
+			const record = await memorySettingsStorage.get(await memorySettingsRowKey(requestContext, binding));
+			requestContext.set("mastra__factoryMemorySettings", record);
 		};
+		const resolveDefaultThinkingLevel = (requestContext) => resolveFactoryThinkingLevel(requestContext, {
+			projects: factoryProjectsStorage,
+			sourceControl: sourceControlSessions,
+			workItems: workItemsStorage,
+			modelDefaults: modelDefaultsStorage
+		});
 		const factoryProcessor = workItemsReady ? new FactoryPhaseStateProcessor({
 			configVersion,
 			storage: workItemsStorage,
 			boards: this.#boards,
 			loadMemorySettings,
-			factoryThinkingLevel: (factoryProjectId) => readFactoryThinkingLevel(factoryProjectsStorage, factoryProjectId),
+			defaultThinkingLevel: resolveDefaultThinkingLevel,
 			...transitionService ? { transitionService } : {},
 			...githubIntegration ? { recordPullRequestProvenance: (input) => recordFactoryPullRequestProvenance(githubIntegration, sourceControlStorage.forIntegration("github"), integrationStorage.forIntegration("github"), workItemsStorage, input) } : {},
 			messageReader: { listMessages: async (input) => {
@@ -711,6 +690,7 @@ var MastraFactory = class {
 				if (proto.constructor?.name === "LibSQLFactoryStorage") return "libsql";
 			}
 		})();
+		const integrationInputProcessors = integrations.flatMap((integration) => integration.processors?.input ?? []);
 		const toolIntegrations = integrationRegistrations.filter(({ integration }) => integration.agentTools || integration.sessionTools);
 		const sourceControlToolProviders = integrations.flatMap((integration) => integration.versionControl ? [{
 			id: integration.id,
@@ -719,14 +699,12 @@ var MastraFactory = class {
 		}] : []);
 		const prepared = await timedPhase("prepare.controllerMount", () => prepareAgentControllerMount({
 			controllerId: CONTROLLER_ID,
+			browser: this.#config.browser,
 			coAuthor: { name: "mastra-platform[bot]" },
 			...this.#config.disableBuiltinTools?.length ? { disableBuiltinTools: this.#config.disableBuiltinTools } : {},
 			modes: false,
 			subagents: [],
-			resolveDefaultThinkingLevel: ({ requestContext }) => resolveFactoryThinkingLevel(requestContext, {
-				projects: factoryProjectsStorage,
-				sourceControl: sourceControlSessions
-			}),
+			resolveDefaultThinkingLevel: ({ requestContext }) => resolveDefaultThinkingLevel(requestContext),
 			workspace: createWorkspaceFactory({
 				...sandboxConfig ? { sandbox: sandboxConfig } : {},
 				...this.#config.sandboxStart ? { sandboxStart: this.#config.sandboxStart } : {},
@@ -839,7 +817,6 @@ var MastraFactory = class {
 			...mastraStorageBackend ? { storageBackend: mastraStorageBackend } : {},
 			...this.#config.knowledge ? { knowledge: this.#config.knowledge } : {},
 			inputProcessors: async ({ requestContext }) => {
-				const channelReplyProcessor = new FactoryChannelReplyProcessor();
 				const environmentProcessor = new FactoryEnvironmentStateProcessor();
 				const sessionsProcessor = workItemsStorage && storage.isDomainReady("source-control") ? [new FactorySessionsStateProcessor({
 					authEnabled: routeAuth.enabled(),
@@ -859,7 +836,7 @@ var MastraFactory = class {
 				if (factoryProcessor) {
 					await factoryProcessor.prepareMemorySettings(requestContext);
 					return [
-						channelReplyProcessor,
+						...integrationInputProcessors,
 						environmentProcessor,
 						...sessionsProcessor,
 						factoryProcessor
@@ -874,14 +851,14 @@ var MastraFactory = class {
 					reportMemorySettingsUnavailable(requestContext, error instanceof Error ? error.message : String(error));
 				}
 				return [
-					channelReplyProcessor,
+					...integrationInputProcessors,
 					environmentProcessor,
 					...sessionsProcessor
 				];
 			},
-			outputProcessors: [new FactoryChannelSessionLinkProcessor(), new FactoryReplyCredentialProcessor()],
+			outputProcessors: [...integrations.flatMap((integration) => integration.processors?.output ?? []), new FactoryReplyCredentialProcessor()],
 			...vector ? { vector } : {},
-			...toolIntegrations.length > 0 || sourceControlToolProviders.length > 0 || workItemsStorage && transitionService ? { extraTools: async ({ requestContext }) => {
+			extraTools: async ({ requestContext }) => {
 				const tools = {};
 				const toolOwners = /* @__PURE__ */ new Map();
 				const mergeTools = (ownerId, contributed) => {
@@ -968,10 +945,16 @@ var MastraFactory = class {
 							projects: factoryProjectsStorage,
 							workItems: workItemsStorage
 						});
-						if (scope) mergeTools("factory-tools", createFactoryTools({
-							scope,
-							deps: factoryToolDeps
-						}));
+						if (scope) {
+							mergeTools("factory-tools", createFactoryTools({
+								scope,
+								deps: factoryToolDeps
+							}));
+							if (sessionRetirement && sandboxConfig && SELF_RECREATE_SANDBOX_PROVIDERS.has(sandboxConfig.provider)) mergeTools("factory-sandbox-tools", createFactorySandboxTools(scope, {
+								sessions: sourceControlSessions,
+								resetSandbox: (input) => sessionRetirement.resetSessionSandbox(input)
+							}));
+						}
 					}
 				}
 				for (const { integration, ready, ensureReady } of toolIntegrations) {
@@ -984,7 +967,7 @@ var MastraFactory = class {
 					if (integration.sessionTools) mergeTools(integration.id, integration.sessionTools({ requestContext }));
 				}
 				return tools;
-			} } : {},
+			},
 			postToolObserver: async (toolContext) => {
 				const requestContext = toolContext.context?.requestContext;
 				if (requestContext) await observeAgentGitAction({
@@ -1023,7 +1006,7 @@ var MastraFactory = class {
 			} : {},
 			buildApiRoutes: ({ controller, authStorage }) => [
 				...auth ? buildAuthRoutes(auth, { publicUrl: publicOrigin }) : buildAuthDisabledRoutes(),
-				...auth && mcpAuthorizationServers.length > 0 ? buildFactoryMcpRoutes({
+				...mcpEnabled ? buildFactoryMcpRoutes({
 					auth: routeAuth,
 					publicOrigin,
 					authorizationServers: mcpAuthorizationServers,
@@ -1067,6 +1050,7 @@ var MastraFactory = class {
 					intakeReady,
 					factoryReady,
 					knowledgeEnabled,
+					mcpEnabled,
 					deploymentModelProviders,
 					knowledgeKey: this.#config.knowledge?.key,
 					configVersion,
@@ -1137,10 +1121,19 @@ var MastraFactory = class {
 				}) : []
 			],
 			buildServerConfig: () => {
-				const cors = allowedOrigins.length ? { cors: {
+				const mcpCors = {
+					allowHeaders: [
+						"Mcp-Protocol-Version",
+						"Mcp-Method",
+						"Mcp-Name"
+					],
+					exposeHeaders: ["WWW-Authenticate"]
+				};
+				const cors = { cors: allowedOrigins.length ? {
 					origin: allowedOrigins,
-					credentials: true
-				} } : {};
+					credentials: true,
+					...mcpCors
+				} : mcpCors };
 				const onError = { onError: handleServerError };
 				const uiDist = resolveUiDistDir();
 				const spa = uiDist ? [createSpaStaticMiddleware(uiDist)] : [];