@mastra/factory 0.25.0-alpha.3 → 0.25.0-alpha.5

package/dist/auth.js

@@ -6,7 +6,7 @@ import { MastraAuthWorkos } from "@mastra/auth-workos";
 import { MASTRA_MESSAGE_AUTHOR_KEY } from "@mastra/core/request-context";
 import { isAuthHttpHandler, isCredentialsProvider, isOrganizationsProvider, isSSOProvider, isSessionProvider, registerApiRoute } from "@mastra/core/server";
 import { HTTPException } from "hono/http-exception";
-//#region src/auth.ts
+// src/auth.ts
 const ORGANIZATION_ID_HEADER = "X-Mastra-Organization-Id";
 /**
 * Validate that a `returnTo` value is a safe same-site path, to prevent
@@ -667,7 +667,6 @@ function mountFactoryAuth(app, options = {}) {
 	app.use("*", createFactoryAuthGate(provider));
 	return true;
 }
-//#endregion
 export { FACTORY_INTERACTIVE_KEY, bearerTokenOrgClaim, buildAuthDisabledRoutes, buildAuthRoutes, createFactoryAuthGate, createFactoryInteractiveMarker, createFactoryRouteAuth, ensureFactoryAuthUser, factoryAuthTenant, factoryUserOrgId, getBearerToken, getFactoryAuthOrgId, getFactoryAuthUser, getFactoryAuthUserFromContext, getFactoryAuthUserId, getWorkOSProvider, isCrossSiteAuth, isOrganizationAdmin, isWorkOSAuth, mountFactoryAuth, registerAuthRoutes, sanitizeReturnTo };
 
 //# sourceMappingURL=auth.js.map

package/dist/boards/define-board.js

@@ -1,6 +1,6 @@
 import { FACTORY_GITHUB_EVENTS, FACTORY_GITLAB_EVENTS, FACTORY_INCIDENTIO_EVENTS, FACTORY_JIRA_EVENTS, FACTORY_LINEAR_EVENTS } from "../rules/types.js";
 import { IDENTIFIER_RE, isBoardIdentifier } from "../rules/validation.js";
-//#region src/boards/define-board.ts
+// src/boards/define-board.ts
 const BOARD_EVENT_NAMES = {
 	github: FACTORY_GITHUB_EVENTS,
 	gitlab: FACTORY_GITLAB_EVENTS,
@@ -150,7 +150,6 @@ function defineBoard(config) {
 		phaseForRole: (role) => phaseByRole.get(role)
 	});
 }
-//#endregion
 export { BoardDefinitionError, defineBoard };
 
 //# sourceMappingURL=define-board.js.map

package/dist/boards/index.js

@@ -3,7 +3,7 @@ import { boardEventHandlers, boardForWorkItem, eventBoardId, isTerminalWorkItem,
 import { isReviewBoardPhase, reviewBoard } from "./review.js";
 import { isWorkBoardPhase, workBoard } from "./work.js";
 import { createBoardRegistry, defaultBoards } from "./registry.js";
-//#region src/boards/index.ts
+// src/boards/index.ts
 const builtInBoards = {
 	work: workBoard,
 	review: reviewBoard
@@ -15,7 +15,6 @@ function allowsBuiltInBoardTransition(board, from, to) {
 	if (board === "work") return isWorkBoardPhase(from) && isWorkBoardPhase(to) && workBoard.allowsTransition(from, to);
 	return isReviewBoardPhase(from) && isReviewBoardPhase(to) && reviewBoard.allowsTransition(from, to);
 }
-//#endregion
 export { BoardDefinitionError, allowsBuiltInBoardTransition, boardEventHandlers, boardForWorkItem, builtInBoard, createBoardRegistry, defaultBoards, defineBoard, eventBoardId, isTerminalWorkItem, resolveBoardClosure, resolveBoardToolRule, resolvePhaseSemantics, reviewBoard, rulePhaseContext, rulePhaseField, withBoardClosure, workBoard, workItemPhaseSemantics };
 
 //# sourceMappingURL=index.js.map

package/dist/boards/registry.js

@@ -1,6 +1,6 @@
 import { reviewBoard } from "./review.js";
 import { workBoard } from "./work.js";
-//#region src/boards/registry.ts
+// src/boards/registry.ts
 const defaultBoards = Object.freeze([workBoard, reviewBoard]);
 function createBoardRegistry(options = {}) {
 	const installed = options.includeDefaultBoards === false ? [] : defaultBoards;
@@ -19,7 +19,6 @@ function createBoardRegistry(options = {}) {
 		[Symbol.iterator]: registry[Symbol.iterator].bind(registry)
 	});
 }
-//#endregion
 export { createBoardRegistry, defaultBoards };
 
 //# sourceMappingURL=registry.js.map

package/dist/boards/relocate.js

@@ -1,5 +1,5 @@
 import { WorkItemUpdateConflictError } from "../storage/domains/work-items/base.js";
-//#region src/boards/relocate.ts
+// src/boards/relocate.ts
 /** Rows that predate persisted boards used source-type routing. */
 function effectiveBoard(item) {
 	return item.board ?? (item.externalSource?.type === "pull-request" ? "review" : "work");
@@ -52,7 +52,6 @@ function cardLabels(item) {
 	const labels = item.metadata?.labels;
 	return Array.isArray(labels) ? labels.filter((label) => typeof label === "string") : [];
 }
-//#endregion
 export { cardLabels, effectiveBoard, moveCardToBoard };
 
 //# sourceMappingURL=relocate.js.map

package/dist/boards/review.js

@@ -1,6 +1,6 @@
 import { defineBoard } from "./define-board.js";
 import { legacyGithubWorkItemBranch, workItemBranch, workItemNumber } from "../work-item-branch.js";
-//#region src/boards/review.ts
+// src/boards/review.ts
 function sourceRef(item) {
 	const link = item.url ? ` (${item.url})` : "";
 	const number = workItemNumber(item);
@@ -119,7 +119,6 @@ const reviewBoard = defineBoard({
 function isReviewBoardPhase(value) {
 	return value in reviewBoard.phases;
 }
-//#endregion
 export { hasRecordedVerdict, isReviewBoardPhase, reviewBoard };
 
 //# sourceMappingURL=review.js.map

package/dist/boards/semantics.js

@@ -1,4 +1,4 @@
-//#region src/boards/semantics.ts
+// src/boards/semantics.ts
 /**
 * Board that owns a work item. Rows created before boards were persisted carry no `board`;
 * they belong to Review when they track a pull request and to Work otherwise, matching the
@@ -113,7 +113,6 @@ function rulePhaseField(boards, item) {
 	const phase = rulePhaseContext(boards, item);
 	return phase ? { phase } : {};
 }
-//#endregion
 export { boardEventHandlers, boardForWorkItem, eventBoardId, isTerminalWorkItem, resolveBoardClosure, resolveBoardToolRule, resolvePhaseSemantics, rulePhaseContext, rulePhaseField, withBoardClosure, workItemPhaseSemantics };
 
 //# sourceMappingURL=semantics.js.map

package/dist/boards/transition-policy.js

@@ -1,6 +1,6 @@
 import { FACTORY_TRIAGE_TYPES } from "../rules/types.js";
 import { z } from "zod";
-//#region src/boards/transition-policy.ts
+// src/boards/transition-policy.ts
 function immutablePolicySnapshot(value) {
 	if (value instanceof Date) return value.toISOString();
 	if (Array.isArray(value)) return Object.freeze(value.map((entry) => immutablePolicySnapshot(entry)));
@@ -30,7 +30,6 @@ const boardTransitionPolicyResultSchema = z.union([z.undefined(), z.discriminate
 	]),
 	reason: z.string().trim().min(1).max(512)
 }).strict()])]);
-//#endregion
 export { boardTransitionPolicyResultSchema, immutablePolicySnapshot };
 
 //# sourceMappingURL=transition-policy.js.map

package/dist/boards/work-tool-rules.js

@@ -1,4 +1,4 @@
-//#region src/boards/work-tool-rules.ts
+// src/boards/work-tool-rules.ts
 function resultContent(value) {
 	if (typeof value === "string") return value;
 	if (!value || typeof value !== "object" || Array.isArray(value)) return;
@@ -14,7 +14,6 @@ function advanceApprovedPlan(context) {
 		stage: "execute"
 	};
 }
-//#endregion
 export { advanceApprovedPlan };
 
 //# sourceMappingURL=work-tool-rules.js.map

package/dist/boards/work-transition-policy.js

@@ -1,4 +1,4 @@
-//#region src/boards/work-transition-policy.ts
+// src/boards/work-transition-policy.ts
 const workTransitionPolicy = (context) => {
 	const { item, requestedTriageType, actor, fromStage, toStage, isHumanTransition, plansAutoApproved, planApproved } = context;
 	const triageAgent = actor.type === "agent" && actor.role === "triage";
@@ -51,7 +51,6 @@ const workTransitionPolicy = (context) => {
 		...isHumanTransition && entersWork && !item.acceptedAt ? { accept: true } : {}
 	};
 };
-//#endregion
 export { workTransitionPolicy };
 
 //# sourceMappingURL=work-transition-policy.js.map

package/dist/boards/work.js

@@ -3,7 +3,7 @@ import { defineBoard } from "./define-board.js";
 import { workItemNumber } from "../work-item-branch.js";
 import { advanceApprovedPlan } from "./work-tool-rules.js";
 import { workTransitionPolicy } from "./work-transition-policy.js";
-//#region src/boards/work.ts
+// src/boards/work.ts
 function sourceIdentifier(item) {
 	const identifier = item.metadata?.identifier;
 	return typeof identifier === "string" ? identifier : void 0;
@@ -279,7 +279,6 @@ const workBoard = defineBoard({
 function isWorkBoardPhase(value) {
 	return Object.prototype.hasOwnProperty.call(workBoard.phases, value);
 }
-//#endregion
 export { SELF_REVIEW_ROUND_LIMIT, isWorkBoardPhase, openApprovedChangeRequest, selfReviewRounds, workBoard };
 
 //# sourceMappingURL=work.js.map

package/dist/environment/build-runner.js

@@ -2,7 +2,7 @@ import { environmentBuildContext, errorReason, resolveEnvironmentHeads } from ".
 import { resolveProjectEnvironment } from "../workspace.js";
 import { ENVIRONMENT_BUILD_WORKFLOW_ID, createEnvironmentBuildWorkflow } from "./build-workflow.js";
 import { probeSchedulesAvailable } from "./build-schedule.js";
-//#region src/environment/build-runner.ts
+// src/environment/build-runner.ts
 var EnvironmentBuildRunner = class {
 	workflow;
 	#deps;
@@ -126,7 +126,6 @@ var EnvironmentBuildRunner = class {
 		return outcome;
 	};
 };
-//#endregion
 export { EnvironmentBuildRunner };
 
 //# sourceMappingURL=build-runner.js.map

package/dist/environment/build-schedule.js

@@ -1,6 +1,6 @@
 import { ENVIRONMENT_BUILD_WORKFLOW_ID } from "./build-workflow.js";
 import { validateCron } from "@mastra/core/workflows";
-//#region src/environment/build-schedule.ts
+// src/environment/build-schedule.ts
 const SCHEDULES_UNAVAILABLE_ERROR_ID = "SCHEDULES_NO_SCHEDULES_STORAGE";
 /**
 * The project's schedule id in its stored form. Core normalizes a created
@@ -88,7 +88,6 @@ async function ensureSchedule(schedules, projectId, input) {
 	if (!input.enabled && next.status === "active") next = await schedules.pause(current.id);
 	return toView(isWorkflowSchedule(next) ? next : null);
 }
-//#endregion
 export { SCHEDULES_UNAVAILABLE_ERROR_ID, ensureSchedule, invalidCronMessage, probeSchedulesAvailable, readSchedule, scheduleIdFor };
 
 //# sourceMappingURL=build-schedule.js.map

package/dist/environment/build-workflow.js

@@ -2,7 +2,7 @@ import { ENVIRONMENT_BUILD_TRIGGERS, environmentBuildContext, errorReason, redac
 import { resolveProjectEnvironment } from "../workspace.js";
 import { createStep, createWorkflow } from "@mastra/core/workflows";
 import { z } from "zod";
-//#region src/environment/build-workflow.ts
+// src/environment/build-workflow.ts
 /**
 * The `factory-environment-build` workflow: step one decides and starts a
 * build (`runEnvironmentBuild`), step two polls the provider until the build
@@ -143,7 +143,6 @@ function createEnvironmentBuildWorkflow(deps, options = {}) {
 		outputSchema: environmentBuildOutputSchema
 	}).then(start).then(awaitBuild).commit();
 }
-//#endregion
 export { DEFAULT_BUILD_POLL_MS, ENVIRONMENT_BUILD_WORKFLOW_ID, MAX_BUILD_WAIT_MS, createEnvironmentBuildWorkflow, environmentBuildInputSchema, environmentBuildOutputSchema };
 
 //# sourceMappingURL=build-workflow.js.map

package/dist/environment/build.js

@@ -1,7 +1,7 @@
 import { headsChanged, recordedHeadResolver, resolveCurrentHeads } from "./heads.js";
 import { environmentSandboxContext, resolveProjectEnvironment } from "../workspace.js";
 import { createHash, randomUUID } from "crypto";
-//#region src/environment/build.ts
+// src/environment/build.ts
 /**
 * One proactive environment build: decide whether a trigger should build,
 * hand the sandbox's `builds` capability a context identical to a session's,
@@ -340,7 +340,6 @@ async function runEnvironmentBuild(deps, input) {
 		clearInterval(renewal);
 	}
 }
-//#endregion
 export { BUILD_START_LEASE_MS, ENVIRONMENT_BUILD_TRIGGERS, environmentBuildContext, environmentBuildInputs, environmentBuildSessionId, errorReason, redactCredentials, resolveEnvironmentHeads, runEnvironmentBuild };
 
 //# sourceMappingURL=build.js.map

package/dist/environment/heads.js

@@ -1,5 +1,5 @@
 import { getBranchHead } from "../integrations/github/commits.js";
-//#region src/environment/heads.ts
+// src/environment/heads.ts
 /** `owner/repo` from a clone URL in any common spelling, lower-cased, `.git` stripped; undefined when unparseable. */
 function cloneUrlSlug(cloneUrl) {
 	let path;
@@ -54,7 +54,6 @@ async function resolveCurrentHeads(github, input) {
 	});
 	return heads;
 }
-//#endregion
 export { cloneUrlSlug, headsChanged, matchEnvironmentSlug, recordedHeadResolver, resolveCurrentHeads };
 
 //# sourceMappingURL=heads.js.map

package/dist/factory.d.ts

@@ -108,8 +108,10 @@ export interface MastraFactoryConfig {
      * `new PlatformFactorySandbox({ ... })`, which owns the session sandbox
      * constructor, the repo template and the schema of environment settings.
      * A bare callback is also accepted and wrapped as a `provider: 'custom'`
-     * sandbox with no settings. Omitted → repository sandboxes are
-     * disabled.
+     * sandbox with no settings. Omitted with Platform credentials → the factory
+     * installs a `LocalFactorySandbox` under `mastra dev` and a
+     * `PlatformFactorySandbox` in built deployments. Omitted without Platform
+     * credentials → repository sandboxes are disabled.
      */
     sandbox?: MastraFactorySandboxOption;
     /** Browser automation provider for Factory agent sessions. */

package/dist/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAiC,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAClG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAkB,yBAAyB,EAAoB,MAAM,wBAAwB,CAAC;AAY1G,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,KAAK,EAAE,kBAAkB,EAAgD,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAkBlF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AA+BxD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AA0DtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAI1D,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,sGAAsG;QACtG,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YACP,uFAAuF;YACvF,KAAK,CAAC,EAAE,mBAAmB,CAAC;YAC5B;;;eAGG;YACH,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,YAAY,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC3G,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgFD,qBAAa,aAAa;;gBAiBZ,MAAM,EAAE,mBAAmB;IAsBvC;;;;OAIG;IACH,IAAI,kBAAkB,IAAI,yBAAyB,GAAG,SAAS,CAI9D;IAED;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IA8/CpC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB/B,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAiC,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAClG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAkB,yBAAyB,EAAoB,MAAM,wBAAwB,CAAC;AAY1G,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,KAAK,EAAE,kBAAkB,EAAgD,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAalF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAgCxD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AA0DtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAI1D,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,sGAAsG;QACtG,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YACP,uFAAuF;YACvF,KAAK,CAAC,EAAE,mBAAmB,CAAC;YAC5B;;;eAGG;YACH,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,YAAY,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC3G,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAuGD,qBAAa,aAAa;;gBAiBZ,MAAM,EAAE,mBAAmB;IAsBvC;;;;OAIG;IACH,IAAI,kBAAkB,IAAI,yBAAyB,GAAG,SAAS,CAI9D;IAED;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IAqgDpC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB/B,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}

package/dist/factory.js

@@ -19,25 +19,17 @@ import { recordFactoryPullRequestProvenance, resolveFactoryPullRequestParentWork
 import { dismissStaleFactoryReviews } from "./integrations/github/stale-reviews.js";
 import { PlatformApiClient, platformApiClientConfigFromEnv } from "./integrations/platform/api-client.js";
 import { buildPlatformConnectRoutes } from "./integrations/platform/connect/routes.js";
-import { createSessionAccessGuard } from "./routes/session-access.js";
-import { observeSessionFirstExec } from "./session/first-exec-capture.js";
-import { observeSessionFilesystem } from "./session/filesystem-capture.js";
-import { sessionMemoryResourceId, sessionStampCounts } from "./session/session-threads.js";
 import { createPlaintextFactorySecretEncryption } from "./secret-encryption.js";
 import { ModelCredentialsStorage } from "./storage/domains/credentials/base.js";
 import { tenantOrgId } from "./routes/provider-credentials.js";
 import { createTenantCredentialPrimer, primeTenantCredentials, registerTenantCredentialResolver } from "./routes/tenant-credentials.js";
 import { hasResolvedOrg } from "./session/org-seed.js";
 import { createSessionAsRowOwner, prepareSessionRunContext } from "./integrations/subscription-session.js";
-import { PlatformGithubIntegration } from "./integrations/platform/github/integration.js";
-import { PlatformGitLabIntegration } from "./integrations/platform/gitlab/integration.js";
-import { PlatformIncidentioIntegration } from "./integrations/platform/incidentio/integration.js";
-import { PlatformJiraIntegration } from "./integrations/platform/jira/integration.js";
-import { PlatformLinearIntegration } from "./integrations/platform/linear/integration.js";
 import { FactoryProjectsStorage } from "./storage/domains/projects/base.js";
 import { SourceControlStorage } from "./storage/domains/source-control/base.js";
 import { createSourceControlSessionLookup } from "./session/factory-session.js";
 import { AuditStorage } from "./storage/domains/audit/base.js";
+import { sessionMemoryResourceId, sessionStampCounts } from "./session/session-threads.js";
 import { resolveFactoryToolScope } from "./tools/scope.js";
 import { deliverFactorySessionNotification } from "./tools/deliver.js";
 import { createSessionApprovalNotifier, createSessionRunEndReporter, createStageChangeNotifier, createWorkItemRunEndReporter } from "./tools/reports.js";
@@ -45,6 +37,9 @@ import { resolveFactoryCredentialTenant, resolveFactoryModelPolicy } from "./ses
 import { hydrateSessionMemorySettings } from "./session/memory-settings-hydration.js";
 import { MemorySettingsStorage, factoryMemorySettingsUserId } from "./storage/domains/memory-settings/base.js";
 import { resolveDeploymentModelProviders } from "./routes/config.js";
+import { observeSessionFirstExec } from "./session/first-exec-capture.js";
+import { observeSessionFilesystem } from "./session/filesystem-capture.js";
+import { createSessionAccessGuard } from "./routes/session-access.js";
 import { observeSessionRunEnd } from "./session/run-audit.js";
 import { observeSessionRunReports } from "./tools/run-watch.js";
 import { applyFactoryToolPermissions } from "./tools/permissions.js";
@@ -65,6 +60,7 @@ import { createReviewSourceTool, resolveReviewSourceUiOrigin } from "./rules/rev
 import { createTerminalStageCleanup } from "./rules/terminal-cleanup.js";
 import { createFactoryTransitionTools } from "./rules/tools.js";
 import { CallbackFactorySandbox } from "./sandbox/callback-factory-sandbox.js";
+import { LocalFactorySandbox } from "./sandbox/local-factory-sandbox.js";
 import { SessionRetirementCoordinator } from "./sandbox/session-retirement.js";
 import { handleServerError } from "./server-error.js";
 import { hydrateSessionDefaultModel } from "./session/default-model-hydration.js";
@@ -96,7 +92,7 @@ import { getDynamicMemory } from "@mastra/code-sdk/agents/memory";
 import { AgentControllerChannels } from "@mastra/core/channels";
 import { EventEmitterPubSub } from "@mastra/core/events";
 import { describeFactorySandbox, isFactorySandbox } from "@mastra/core/workspace";
-//#region src/factory.ts
+// src/factory.ts
 /**
 * `MastraFactory` — the single entry point to the whole Mastra Software Factory.
 *
@@ -134,6 +130,24 @@ function hasPlatformCredentials() {
 	return Boolean(process.env.MASTRA_PLATFORM_ACCESS_TOKEN?.trim() || process.env.MASTRA_PLATFORM_SECRET_KEY?.trim());
 }
 /**
+* The sandbox the factory installs when the host passes none and Platform
+* credentials are present: a local sandbox under `mastra dev` (or
+* NODE_ENV=development), so development never boots remote machines, and
+* a Platform sandbox in built deployments. Without credentials, sandboxes
+* stay disabled.
+*/
+async function platformDefaultSandbox() {
+	if (!hasPlatformCredentials()) return void 0;
+	if (process.env.MASTRA_DEV === "true" || process.env.NODE_ENV === "development") return new LocalFactorySandbox();
+	const missing = ["MASTRA_PROJECT_ID", "MASTRA_ENVIRONMENT_ID"].filter((key) => !process.env[key]?.trim());
+	if (missing.length > 0) {
+		console.warn(`MastraFactory: Platform credentials are set but ${missing.join(" and ")} ${missing.length > 1 ? "are" : "is"} missing, so no Platform sandbox was installed and repository sandboxes are disabled.`);
+		return;
+	}
+	const { PlatformFactorySandbox } = await import("@mastra/platform-workspace");
+	return new PlatformFactorySandbox();
+}
+/**
 * Default auth provider — `MastraAuthStudio`, which proxies identity to the
 * shared Mastra platform API and resolves its own env (`MASTRA_SHARED_API_URL`,
 * `MASTRA_ORGANIZATION_ID`, ...).
@@ -249,16 +263,29 @@ var MastraFactory = class {
 		let installedPlatformGithub = false;
 		if (hasPlatformCredentials()) {
 			if (!explicitGithub) {
+				const { PlatformGithubIntegration } = await import("./integrations/platform/github/integration.js");
 				integrations.push(new PlatformGithubIntegration({
 					rules: this.#config.platform?.github?.rules,
 					slug: this.#config.platform?.github?.slug ?? this.#config.platform?.githubAppSlug
 				}));
 				installedPlatformGithub = true;
 			}
-			if (!integrations.some((integration) => integration.id === "incidentio")) integrations.push(new PlatformIncidentioIntegration());
-			if (!integrations.some((integration) => integration.id === "jira")) integrations.push(new PlatformJiraIntegration());
-			if (!integrations.some((integration) => integration.id === "gitlab")) integrations.push(new PlatformGitLabIntegration());
-			if (!integrations.some((integration) => integration.id === "linear")) integrations.push(new PlatformLinearIntegration());
+			if (!integrations.some((integration) => integration.id === "incidentio")) {
+				const { PlatformIncidentioIntegration } = await import("./integrations/platform/incidentio/integration.js");
+				integrations.push(new PlatformIncidentioIntegration());
+			}
+			if (!integrations.some((integration) => integration.id === "jira")) {
+				const { PlatformJiraIntegration } = await import("./integrations/platform/jira/integration.js");
+				integrations.push(new PlatformJiraIntegration());
+			}
+			if (!integrations.some((integration) => integration.id === "gitlab")) {
+				const { PlatformGitLabIntegration } = await import("./integrations/platform/gitlab/integration.js");
+				integrations.push(new PlatformGitLabIntegration());
+			}
+			if (!integrations.some((integration) => integration.id === "linear")) {
+				const { PlatformLinearIntegration } = await import("./integrations/platform/linear/integration.js");
+				integrations.push(new PlatformLinearIntegration());
+			}
 		}
 		if (this.#config.platform?.github && !installedPlatformGithub) console.warn("[factory] 'platform.github' config was provided but the factory installed no GitHub integration of its own " + (explicitGithub ? "(an explicit integration with id 'github' takes precedence, so these options were ignored)." : "(no Platform credentials are configured and no explicit GitHub integration was passed)."));
 		const integrationIds = /* @__PURE__ */ new Set();
@@ -323,7 +350,8 @@ var MastraFactory = class {
 		});
 		const sandboxOption = this.#config.sandbox;
 		let sandboxConfig;
-		if (sandboxOption === void 0 || isFactorySandbox(sandboxOption)) sandboxConfig = sandboxOption;
+		if (sandboxOption === void 0) sandboxConfig = await platformDefaultSandbox();
+		else if (isFactorySandbox(sandboxOption)) sandboxConfig = sandboxOption;
 		else if (typeof sandboxOption === "function") sandboxConfig = new CallbackFactorySandbox(sandboxOption);
 		else throw new Error(invalidSandboxOptionMessage(sandboxOption));
 		this.#sandbox = sandboxConfig;
@@ -1300,7 +1328,6 @@ var MastraFactory = class {
 		await this.#dispatcher?.stop();
 	}
 };
-//#endregion
 export { MastraFactory };
 
 //# sourceMappingURL=factory.js.map