@mastra/factory 0.25.0-alpha.4 → 0.25.0-alpha.6

package/README.md

@@ -535,7 +535,7 @@ A decision _without_ the flag that reaches a card which already exists keeps the
 
 Reconciliation re-applies label-derived placement. The issue sweep replays an open issue through the rules ingress whenever the issue's live labels differ from the card's stored ones — the `labeled`/`unlabeled` webhook may never have arrived (Factory was down, or the label was applied by something else). The deployment rule decides placement, exactly as at arrival, and the context carries the existing card on `item`, so one handler answers for both: a card still resting on the board's initial phase is landed the normal way, and a card that has already left it is re-placed with `skipRules` and no phase rule run. Cards parked by hand are untouched while an issue's labels are unchanged.
 
-A delivery that concerns two cards is evaluated once per card, each under its own ingress identity: every decision is committed against one card, at that card's revision. A merged pull request is the standard case — its Review card closes and the Work item that wrote the code assesses whether it is finished. An opening pull request is evaluated the same way. Its own Review card is filed by the arrival, the evaluation flagged `pullRequestIntake`, which is committed against the Work item that authored the pull request when provenance or a matching session branch names one; that binding is what links the new card to its item. The authoring item is then answered in a second evaluation of its own (`pullRequestIntake` unset), which is where a handler places the item that is now out for review. The built-in `pullRequestOpened` files the card only on the arrival and returns nothing for the authoring item.
+A delivery that concerns two cards is evaluated once per card, each under its own ingress identity: every decision is committed against one card, at that card's revision. A merged pull request is the standard case — its Review card closes, and the built-in `pullRequestMerged` rule moves the Work item that wrote the code to Done. If that Work item has another pull request open, it stays where it is and its session is told which pull request is still out. An opening pull request is evaluated the same way. Its own Review card is filed by the arrival, the evaluation flagged `pullRequestIntake`, which is committed against the Work item that authored the pull request when provenance or a matching session branch names one; that binding is what links the new card to its item. The authoring item is then answered in a second evaluation of its own (`pullRequestIntake` unset), which is where a handler places the item that is now out for review. The built-in `pullRequestOpened` files the card only on the arrival and returns nothing for the authoring item.
 
 ### GitHub CLI authentication in Factory sessions
 
@@ -563,6 +563,8 @@ With no constructor options, the integration reads `GITLAB_ACCESS_TOKEN`, `GITLA
 
 `GITLAB_BASE_URL` must use HTTPS. Plain HTTP is accepted only for loopback development instances (`localhost`, `127.0.0.0/8`, or `::1`), where the access token is sent without transport encryption.
 
+Linking a GitLab repository imports its open issues and merge requests (up to five pages each). Without a webhook, later items are discovered when their lists are requested, and changed merge-request heads are recorded when the merge-request list is requested. Existing cards can still be reconciled. For ongoing issue changes, comments, and merge-request lifecycle events, configure the direct project webhook with `GITLAB_WEBHOOK_SECRET`.
+
 For a Mastra Platform/Nango connection, use `PlatformGitLabIntegration`. `MastraFactory` installs it automatically whenever Platform credentials are configured and no integration with id `gitlab` was supplied. It discovers every active connection of the organization on the Platform's `gitlab` (OAuth) integration, proxies provider requests through `/v2/connections/{connectionId}/proxy`, and polls the Platform event log for GitLab events. `MASTRA_GITLAB_CONNECTION_ID` (or the `connectionId` constructor option) is optional and only narrows discovery to one connection. An explicit integration with id `gitlab` takes precedence.
 
 ```typescript

package/dist/auth.js

@@ -6,7 +6,7 @@ import { MastraAuthWorkos } from "@mastra/auth-workos";
 import { MASTRA_MESSAGE_AUTHOR_KEY } from "@mastra/core/request-context";
 import { isAuthHttpHandler, isCredentialsProvider, isOrganizationsProvider, isSSOProvider, isSessionProvider, registerApiRoute } from "@mastra/core/server";
 import { HTTPException } from "hono/http-exception";
-//#region src/auth.ts
+// src/auth.ts
 const ORGANIZATION_ID_HEADER = "X-Mastra-Organization-Id";
 /**
 * Validate that a `returnTo` value is a safe same-site path, to prevent
@@ -667,7 +667,6 @@ function mountFactoryAuth(app, options = {}) {
 	app.use("*", createFactoryAuthGate(provider));
 	return true;
 }
-//#endregion
 export { FACTORY_INTERACTIVE_KEY, bearerTokenOrgClaim, buildAuthDisabledRoutes, buildAuthRoutes, createFactoryAuthGate, createFactoryInteractiveMarker, createFactoryRouteAuth, ensureFactoryAuthUser, factoryAuthTenant, factoryUserOrgId, getBearerToken, getFactoryAuthOrgId, getFactoryAuthUser, getFactoryAuthUserFromContext, getFactoryAuthUserId, getWorkOSProvider, isCrossSiteAuth, isOrganizationAdmin, isWorkOSAuth, mountFactoryAuth, registerAuthRoutes, sanitizeReturnTo };
 
 //# sourceMappingURL=auth.js.map

package/dist/boards/define-board.js

@@ -1,6 +1,6 @@
 import { FACTORY_GITHUB_EVENTS, FACTORY_GITLAB_EVENTS, FACTORY_INCIDENTIO_EVENTS, FACTORY_JIRA_EVENTS, FACTORY_LINEAR_EVENTS } from "../rules/types.js";
 import { IDENTIFIER_RE, isBoardIdentifier } from "../rules/validation.js";
-//#region src/boards/define-board.ts
+// src/boards/define-board.ts
 const BOARD_EVENT_NAMES = {
 	github: FACTORY_GITHUB_EVENTS,
 	gitlab: FACTORY_GITLAB_EVENTS,
@@ -150,7 +150,6 @@ function defineBoard(config) {
 		phaseForRole: (role) => phaseByRole.get(role)
 	});
 }
-//#endregion
 export { BoardDefinitionError, defineBoard };
 
 //# sourceMappingURL=define-board.js.map

package/dist/boards/index.js

@@ -3,7 +3,7 @@ import { boardEventHandlers, boardForWorkItem, eventBoardId, isTerminalWorkItem,
 import { isReviewBoardPhase, reviewBoard } from "./review.js";
 import { isWorkBoardPhase, workBoard } from "./work.js";
 import { createBoardRegistry, defaultBoards } from "./registry.js";
-//#region src/boards/index.ts
+// src/boards/index.ts
 const builtInBoards = {
 	work: workBoard,
 	review: reviewBoard
@@ -15,7 +15,6 @@ function allowsBuiltInBoardTransition(board, from, to) {
 	if (board === "work") return isWorkBoardPhase(from) && isWorkBoardPhase(to) && workBoard.allowsTransition(from, to);
 	return isReviewBoardPhase(from) && isReviewBoardPhase(to) && reviewBoard.allowsTransition(from, to);
 }
-//#endregion
 export { BoardDefinitionError, allowsBuiltInBoardTransition, boardEventHandlers, boardForWorkItem, builtInBoard, createBoardRegistry, defaultBoards, defineBoard, eventBoardId, isTerminalWorkItem, resolveBoardClosure, resolveBoardToolRule, resolvePhaseSemantics, reviewBoard, rulePhaseContext, rulePhaseField, withBoardClosure, workBoard, workItemPhaseSemantics };
 
 //# sourceMappingURL=index.js.map

package/dist/boards/registry.js

@@ -1,6 +1,6 @@
 import { reviewBoard } from "./review.js";
 import { workBoard } from "./work.js";
-//#region src/boards/registry.ts
+// src/boards/registry.ts
 const defaultBoards = Object.freeze([workBoard, reviewBoard]);
 function createBoardRegistry(options = {}) {
 	const installed = options.includeDefaultBoards === false ? [] : defaultBoards;
@@ -19,7 +19,6 @@ function createBoardRegistry(options = {}) {
 		[Symbol.iterator]: registry[Symbol.iterator].bind(registry)
 	});
 }
-//#endregion
 export { createBoardRegistry, defaultBoards };
 
 //# sourceMappingURL=registry.js.map

package/dist/boards/relocate.js

@@ -1,5 +1,5 @@
 import { WorkItemUpdateConflictError } from "../storage/domains/work-items/base.js";
-//#region src/boards/relocate.ts
+// src/boards/relocate.ts
 /** Rows that predate persisted boards used source-type routing. */
 function effectiveBoard(item) {
 	return item.board ?? (item.externalSource?.type === "pull-request" ? "review" : "work");
@@ -52,7 +52,6 @@ function cardLabels(item) {
 	const labels = item.metadata?.labels;
 	return Array.isArray(labels) ? labels.filter((label) => typeof label === "string") : [];
 }
-//#endregion
 export { cardLabels, effectiveBoard, moveCardToBoard };
 
 //# sourceMappingURL=relocate.js.map

package/dist/boards/review.js

@@ -1,6 +1,6 @@
 import { defineBoard } from "./define-board.js";
 import { legacyGithubWorkItemBranch, workItemBranch, workItemNumber } from "../work-item-branch.js";
-//#region src/boards/review.ts
+// src/boards/review.ts
 function sourceRef(item) {
 	const link = item.url ? ` (${item.url})` : "";
 	const number = workItemNumber(item);
@@ -119,7 +119,6 @@ const reviewBoard = defineBoard({
 function isReviewBoardPhase(value) {
 	return value in reviewBoard.phases;
 }
-//#endregion
 export { hasRecordedVerdict, isReviewBoardPhase, reviewBoard };
 
 //# sourceMappingURL=review.js.map

package/dist/boards/semantics.js

@@ -1,4 +1,4 @@
-//#region src/boards/semantics.ts
+// src/boards/semantics.ts
 /**
 * Board that owns a work item. Rows created before boards were persisted carry no `board`;
 * they belong to Review when they track a pull request and to Work otherwise, matching the
@@ -113,7 +113,6 @@ function rulePhaseField(boards, item) {
 	const phase = rulePhaseContext(boards, item);
 	return phase ? { phase } : {};
 }
-//#endregion
 export { boardEventHandlers, boardForWorkItem, eventBoardId, isTerminalWorkItem, resolveBoardClosure, resolveBoardToolRule, resolvePhaseSemantics, rulePhaseContext, rulePhaseField, withBoardClosure, workItemPhaseSemantics };
 
 //# sourceMappingURL=semantics.js.map

package/dist/boards/transition-policy.js

@@ -1,6 +1,6 @@
 import { FACTORY_TRIAGE_TYPES } from "../rules/types.js";
 import { z } from "zod";
-//#region src/boards/transition-policy.ts
+// src/boards/transition-policy.ts
 function immutablePolicySnapshot(value) {
 	if (value instanceof Date) return value.toISOString();
 	if (Array.isArray(value)) return Object.freeze(value.map((entry) => immutablePolicySnapshot(entry)));
@@ -30,7 +30,6 @@ const boardTransitionPolicyResultSchema = z.union([z.undefined(), z.discriminate
 	]),
 	reason: z.string().trim().min(1).max(512)
 }).strict()])]);
-//#endregion
 export { boardTransitionPolicyResultSchema, immutablePolicySnapshot };
 
 //# sourceMappingURL=transition-policy.js.map

package/dist/boards/work-tool-rules.js

@@ -1,4 +1,4 @@
-//#region src/boards/work-tool-rules.ts
+// src/boards/work-tool-rules.ts
 function resultContent(value) {
 	if (typeof value === "string") return value;
 	if (!value || typeof value !== "object" || Array.isArray(value)) return;
@@ -14,7 +14,6 @@ function advanceApprovedPlan(context) {
 		stage: "execute"
 	};
 }
-//#endregion
 export { advanceApprovedPlan };
 
 //# sourceMappingURL=work-tool-rules.js.map

package/dist/boards/work-transition-policy.js

@@ -1,4 +1,4 @@
-//#region src/boards/work-transition-policy.ts
+// src/boards/work-transition-policy.ts
 const workTransitionPolicy = (context) => {
 	const { item, requestedTriageType, actor, fromStage, toStage, isHumanTransition, plansAutoApproved, planApproved } = context;
 	const triageAgent = actor.type === "agent" && actor.role === "triage";
@@ -51,7 +51,6 @@ const workTransitionPolicy = (context) => {
 		...isHumanTransition && entersWork && !item.acceptedAt ? { accept: true } : {}
 	};
 };
-//#endregion
 export { workTransitionPolicy };
 
 //# sourceMappingURL=work-transition-policy.js.map

package/dist/boards/work.js

@@ -3,7 +3,7 @@ import { defineBoard } from "./define-board.js";
 import { workItemNumber } from "../work-item-branch.js";
 import { advanceApprovedPlan } from "./work-tool-rules.js";
 import { workTransitionPolicy } from "./work-transition-policy.js";
-//#region src/boards/work.ts
+// src/boards/work.ts
 function sourceIdentifier(item) {
 	const identifier = item.metadata?.identifier;
 	return typeof identifier === "string" ? identifier : void 0;
@@ -279,7 +279,6 @@ const workBoard = defineBoard({
 function isWorkBoardPhase(value) {
 	return Object.prototype.hasOwnProperty.call(workBoard.phases, value);
 }
-//#endregion
 export { SELF_REVIEW_ROUND_LIMIT, isWorkBoardPhase, openApprovedChangeRequest, selfReviewRounds, workBoard };
 
 //# sourceMappingURL=work.js.map

package/dist/default-thinking-level.d.ts

@@ -0,0 +1,3 @@
+import type { ThinkingLevelSetting } from '@mastra/code-sdk/thinking';
+export declare const DEFAULT_THINKING_LEVEL: ThinkingLevelSetting;
+//# sourceMappingURL=default-thinking-level.d.ts.map

package/dist/default-thinking-level.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-thinking-level.d.ts","sourceRoot":"","sources":["../src/default-thinking-level.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,eAAO,MAAM,sBAAsB,EAAE,oBAA+B,CAAC"}

package/dist/default-thinking-level.js

@@ -0,0 +1,5 @@
+// src/default-thinking-level.ts
+const DEFAULT_THINKING_LEVEL = "medium";
+export { DEFAULT_THINKING_LEVEL };
+
+//# sourceMappingURL=default-thinking-level.js.map

package/dist/default-thinking-level.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-thinking-level.js","names":[],"sources":["../src/default-thinking-level.ts"],"sourcesContent":["import type { ThinkingLevelSetting } from '@mastra/code-sdk/thinking';\n\nexport const DEFAULT_THINKING_LEVEL: ThinkingLevelSetting = 'medium';\n"],"mappings":";AAEA,MAAa,yBAA+C"}

package/dist/environment/build-runner.js

@@ -2,7 +2,7 @@ import { environmentBuildContext, errorReason, resolveEnvironmentHeads } from ".
 import { resolveProjectEnvironment } from "../workspace.js";
 import { ENVIRONMENT_BUILD_WORKFLOW_ID, createEnvironmentBuildWorkflow } from "./build-workflow.js";
 import { probeSchedulesAvailable } from "./build-schedule.js";
-//#region src/environment/build-runner.ts
+// src/environment/build-runner.ts
 var EnvironmentBuildRunner = class {
 	workflow;
 	#deps;
@@ -126,7 +126,6 @@ var EnvironmentBuildRunner = class {
 		return outcome;
 	};
 };
-//#endregion
 export { EnvironmentBuildRunner };
 
 //# sourceMappingURL=build-runner.js.map

package/dist/environment/build-schedule.js

@@ -1,6 +1,6 @@
 import { ENVIRONMENT_BUILD_WORKFLOW_ID } from "./build-workflow.js";
 import { validateCron } from "@mastra/core/workflows";
-//#region src/environment/build-schedule.ts
+// src/environment/build-schedule.ts
 const SCHEDULES_UNAVAILABLE_ERROR_ID = "SCHEDULES_NO_SCHEDULES_STORAGE";
 /**
 * The project's schedule id in its stored form. Core normalizes a created
@@ -88,7 +88,6 @@ async function ensureSchedule(schedules, projectId, input) {
 	if (!input.enabled && next.status === "active") next = await schedules.pause(current.id);
 	return toView(isWorkflowSchedule(next) ? next : null);
 }
-//#endregion
 export { SCHEDULES_UNAVAILABLE_ERROR_ID, ensureSchedule, invalidCronMessage, probeSchedulesAvailable, readSchedule, scheduleIdFor };
 
 //# sourceMappingURL=build-schedule.js.map

package/dist/environment/build-workflow.js

@@ -2,7 +2,7 @@ import { ENVIRONMENT_BUILD_TRIGGERS, environmentBuildContext, errorReason, redac
 import { resolveProjectEnvironment } from "../workspace.js";
 import { createStep, createWorkflow } from "@mastra/core/workflows";
 import { z } from "zod";
-//#region src/environment/build-workflow.ts
+// src/environment/build-workflow.ts
 /**
 * The `factory-environment-build` workflow: step one decides and starts a
 * build (`runEnvironmentBuild`), step two polls the provider until the build
@@ -143,7 +143,6 @@ function createEnvironmentBuildWorkflow(deps, options = {}) {
 		outputSchema: environmentBuildOutputSchema
 	}).then(start).then(awaitBuild).commit();
 }
-//#endregion
 export { DEFAULT_BUILD_POLL_MS, ENVIRONMENT_BUILD_WORKFLOW_ID, MAX_BUILD_WAIT_MS, createEnvironmentBuildWorkflow, environmentBuildInputSchema, environmentBuildOutputSchema };
 
 //# sourceMappingURL=build-workflow.js.map

package/dist/environment/build.js

@@ -1,7 +1,7 @@
 import { headsChanged, recordedHeadResolver, resolveCurrentHeads } from "./heads.js";
 import { environmentSandboxContext, resolveProjectEnvironment } from "../workspace.js";
 import { createHash, randomUUID } from "crypto";
-//#region src/environment/build.ts
+// src/environment/build.ts
 /**
 * One proactive environment build: decide whether a trigger should build,
 * hand the sandbox's `builds` capability a context identical to a session's,
@@ -340,7 +340,6 @@ async function runEnvironmentBuild(deps, input) {
 		clearInterval(renewal);
 	}
 }
-//#endregion
 export { BUILD_START_LEASE_MS, ENVIRONMENT_BUILD_TRIGGERS, environmentBuildContext, environmentBuildInputs, environmentBuildSessionId, errorReason, redactCredentials, resolveEnvironmentHeads, runEnvironmentBuild };
 
 //# sourceMappingURL=build.js.map

package/dist/environment/heads.js

@@ -1,5 +1,5 @@
 import { getBranchHead } from "../integrations/github/commits.js";
-//#region src/environment/heads.ts
+// src/environment/heads.ts
 /** `owner/repo` from a clone URL in any common spelling, lower-cased, `.git` stripped; undefined when unparseable. */
 function cloneUrlSlug(cloneUrl) {
 	let path;
@@ -54,7 +54,6 @@ async function resolveCurrentHeads(github, input) {
 	});
 	return heads;
 }
-//#endregion
 export { cloneUrlSlug, headsChanged, matchEnvironmentSlug, recordedHeadResolver, resolveCurrentHeads };
 
 //# sourceMappingURL=heads.js.map

package/dist/factory.d.ts

@@ -108,8 +108,10 @@ export interface MastraFactoryConfig {
      * `new PlatformFactorySandbox({ ... })`, which owns the session sandbox
      * constructor, the repo template and the schema of environment settings.
      * A bare callback is also accepted and wrapped as a `provider: 'custom'`
-     * sandbox with no settings. Omitted → repository sandboxes are
-     * disabled.
+     * sandbox with no settings. Omitted with Platform credentials → the factory
+     * installs a `LocalFactorySandbox` under `mastra dev` and a
+     * `PlatformFactorySandbox` in built deployments. Omitted without Platform
+     * credentials → repository sandboxes are disabled.
      */
     sandbox?: MastraFactorySandboxOption;
     /** Browser automation provider for Factory agent sessions. */

package/dist/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAiC,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAClG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAkB,yBAAyB,EAAoB,MAAM,wBAAwB,CAAC;AAY1G,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,KAAK,EAAE,kBAAkB,EAAgD,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAkBlF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AA+BxD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AA0DtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAI1D,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,sGAAsG;QACtG,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YACP,uFAAuF;YACvF,KAAK,CAAC,EAAE,mBAAmB,CAAC;YAC5B;;;eAGG;YACH,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,YAAY,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC3G,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgFD,qBAAa,aAAa;;gBAiBZ,MAAM,EAAE,mBAAmB;IAsBvC;;;;OAIG;IACH,IAAI,kBAAkB,IAAI,yBAAyB,GAAG,SAAS,CAI9D;IAED;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IA8/CpC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB/B,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAiC,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAClG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAkB,yBAAyB,EAAoB,MAAM,wBAAwB,CAAC;AAY1G,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKvE,OAAO,KAAK,EAAE,kBAAkB,EAAgD,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAclF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAgCxD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AA0DtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAI1D,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,sGAAsG;QACtG,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;;;WAMG;QACH,MAAM,CAAC,EAAE;YACP,uFAAuF;YACvF,KAAK,CAAC,EAAE,mBAAmB,CAAC;YAC5B;;;eAGG;YACH,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,YAAY,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC3G,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAuGD,qBAAa,aAAa;;gBAiBZ,MAAM,EAAE,mBAAmB;IAsBvC;;;;OAIG;IACH,IAAI,kBAAkB,IAAI,yBAAyB,GAAG,SAAS,CAI9D;IAED;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IA2hDpC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB/B,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}

package/dist/factory.js

@@ -19,25 +19,17 @@ import { recordFactoryPullRequestProvenance, resolveFactoryPullRequestParentWork
 import { dismissStaleFactoryReviews } from "./integrations/github/stale-reviews.js";
 import { PlatformApiClient, platformApiClientConfigFromEnv } from "./integrations/platform/api-client.js";
 import { buildPlatformConnectRoutes } from "./integrations/platform/connect/routes.js";
-import { createSessionAccessGuard } from "./routes/session-access.js";
-import { observeSessionFirstExec } from "./session/first-exec-capture.js";
-import { observeSessionFilesystem } from "./session/filesystem-capture.js";
-import { sessionMemoryResourceId, sessionStampCounts } from "./session/session-threads.js";
 import { createPlaintextFactorySecretEncryption } from "./secret-encryption.js";
 import { ModelCredentialsStorage } from "./storage/domains/credentials/base.js";
 import { tenantOrgId } from "./routes/provider-credentials.js";
 import { createTenantCredentialPrimer, primeTenantCredentials, registerTenantCredentialResolver } from "./routes/tenant-credentials.js";
 import { hasResolvedOrg } from "./session/org-seed.js";
 import { createSessionAsRowOwner, prepareSessionRunContext } from "./integrations/subscription-session.js";
-import { PlatformGithubIntegration } from "./integrations/platform/github/integration.js";
-import { PlatformGitLabIntegration } from "./integrations/platform/gitlab/integration.js";
-import { PlatformIncidentioIntegration } from "./integrations/platform/incidentio/integration.js";
-import { PlatformJiraIntegration } from "./integrations/platform/jira/integration.js";
-import { PlatformLinearIntegration } from "./integrations/platform/linear/integration.js";
 import { FactoryProjectsStorage } from "./storage/domains/projects/base.js";
 import { SourceControlStorage } from "./storage/domains/source-control/base.js";
 import { createSourceControlSessionLookup } from "./session/factory-session.js";
 import { AuditStorage } from "./storage/domains/audit/base.js";
+import { sessionMemoryResourceId, sessionStampCounts } from "./session/session-threads.js";
 import { resolveFactoryToolScope } from "./tools/scope.js";
 import { deliverFactorySessionNotification } from "./tools/deliver.js";
 import { createSessionApprovalNotifier, createSessionRunEndReporter, createStageChangeNotifier, createWorkItemRunEndReporter } from "./tools/reports.js";
@@ -45,6 +37,9 @@ import { resolveFactoryCredentialTenant, resolveFactoryModelPolicy } from "./ses
 import { hydrateSessionMemorySettings } from "./session/memory-settings-hydration.js";
 import { MemorySettingsStorage, factoryMemorySettingsUserId } from "./storage/domains/memory-settings/base.js";
 import { resolveDeploymentModelProviders } from "./routes/config.js";
+import { observeSessionFirstExec } from "./session/first-exec-capture.js";
+import { observeSessionFilesystem } from "./session/filesystem-capture.js";
+import { createSessionAccessGuard } from "./routes/session-access.js";
 import { observeSessionRunEnd } from "./session/run-audit.js";
 import { observeSessionRunReports } from "./tools/run-watch.js";
 import { applyFactoryToolPermissions } from "./tools/permissions.js";
@@ -65,6 +60,7 @@ import { createReviewSourceTool, resolveReviewSourceUiOrigin } from "./rules/rev
 import { createTerminalStageCleanup } from "./rules/terminal-cleanup.js";
 import { createFactoryTransitionTools } from "./rules/tools.js";
 import { CallbackFactorySandbox } from "./sandbox/callback-factory-sandbox.js";
+import { LocalFactorySandbox } from "./sandbox/local-factory-sandbox.js";
 import { SessionRetirementCoordinator } from "./sandbox/session-retirement.js";
 import { handleServerError } from "./server-error.js";
 import { hydrateSessionDefaultModel } from "./session/default-model-hydration.js";
@@ -96,7 +92,7 @@ import { getDynamicMemory } from "@mastra/code-sdk/agents/memory";
 import { AgentControllerChannels } from "@mastra/core/channels";
 import { EventEmitterPubSub } from "@mastra/core/events";
 import { describeFactorySandbox, isFactorySandbox } from "@mastra/core/workspace";
-//#region src/factory.ts
+// src/factory.ts
 /**
 * `MastraFactory` — the single entry point to the whole Mastra Software Factory.
 *
@@ -134,6 +130,24 @@ function hasPlatformCredentials() {
 	return Boolean(process.env.MASTRA_PLATFORM_ACCESS_TOKEN?.trim() || process.env.MASTRA_PLATFORM_SECRET_KEY?.trim());
 }
 /**
+* The sandbox the factory installs when the host passes none and Platform
+* credentials are present: a local sandbox under `mastra dev` (or
+* NODE_ENV=development), so development never boots remote machines, and
+* a Platform sandbox in built deployments. Without credentials, sandboxes
+* stay disabled.
+*/
+async function platformDefaultSandbox() {
+	if (!hasPlatformCredentials()) return void 0;
+	if (process.env.MASTRA_DEV === "true" || process.env.NODE_ENV === "development") return new LocalFactorySandbox();
+	const missing = ["MASTRA_PROJECT_ID", "MASTRA_ENVIRONMENT_ID"].filter((key) => !process.env[key]?.trim());
+	if (missing.length > 0) {
+		console.warn(`MastraFactory: Platform credentials are set but ${missing.join(" and ")} ${missing.length > 1 ? "are" : "is"} missing, so no Platform sandbox was installed and repository sandboxes are disabled.`);
+		return;
+	}
+	const { PlatformFactorySandbox } = await import("@mastra/platform-workspace");
+	return new PlatformFactorySandbox();
+}
+/**
 * Default auth provider — `MastraAuthStudio`, which proxies identity to the
 * shared Mastra platform API and resolves its own env (`MASTRA_SHARED_API_URL`,
 * `MASTRA_ORGANIZATION_ID`, ...).
@@ -249,16 +263,29 @@ var MastraFactory = class {
 		let installedPlatformGithub = false;
 		if (hasPlatformCredentials()) {
 			if (!explicitGithub) {
+				const { PlatformGithubIntegration } = await import("./integrations/platform/github/integration.js");
 				integrations.push(new PlatformGithubIntegration({
 					rules: this.#config.platform?.github?.rules,
 					slug: this.#config.platform?.github?.slug ?? this.#config.platform?.githubAppSlug
 				}));
 				installedPlatformGithub = true;
 			}
-			if (!integrations.some((integration) => integration.id === "incidentio")) integrations.push(new PlatformIncidentioIntegration());
-			if (!integrations.some((integration) => integration.id === "jira")) integrations.push(new PlatformJiraIntegration());
-			if (!integrations.some((integration) => integration.id === "gitlab")) integrations.push(new PlatformGitLabIntegration());
-			if (!integrations.some((integration) => integration.id === "linear")) integrations.push(new PlatformLinearIntegration());
+			if (!integrations.some((integration) => integration.id === "incidentio")) {
+				const { PlatformIncidentioIntegration } = await import("./integrations/platform/incidentio/integration.js");
+				integrations.push(new PlatformIncidentioIntegration());
+			}
+			if (!integrations.some((integration) => integration.id === "jira")) {
+				const { PlatformJiraIntegration } = await import("./integrations/platform/jira/integration.js");
+				integrations.push(new PlatformJiraIntegration());
+			}
+			if (!integrations.some((integration) => integration.id === "gitlab")) {
+				const { PlatformGitLabIntegration } = await import("./integrations/platform/gitlab/integration.js");
+				integrations.push(new PlatformGitLabIntegration());
+			}
+			if (!integrations.some((integration) => integration.id === "linear")) {
+				const { PlatformLinearIntegration } = await import("./integrations/platform/linear/integration.js");
+				integrations.push(new PlatformLinearIntegration());
+			}
 		}
 		if (this.#config.platform?.github && !installedPlatformGithub) console.warn("[factory] 'platform.github' config was provided but the factory installed no GitHub integration of its own " + (explicitGithub ? "(an explicit integration with id 'github' takes precedence, so these options were ignored)." : "(no Platform credentials are configured and no explicit GitHub integration was passed)."));
 		const integrationIds = /* @__PURE__ */ new Set();
@@ -323,7 +350,8 @@ var MastraFactory = class {
 		});
 		const sandboxOption = this.#config.sandbox;
 		let sandboxConfig;
-		if (sandboxOption === void 0 || isFactorySandbox(sandboxOption)) sandboxConfig = sandboxOption;
+		if (sandboxOption === void 0) sandboxConfig = await platformDefaultSandbox();
+		else if (isFactorySandbox(sandboxOption)) sandboxConfig = sandboxOption;
 		else if (typeof sandboxOption === "function") sandboxConfig = new CallbackFactorySandbox(sandboxOption);
 		else throw new Error(invalidSandboxOptionMessage(sandboxOption));
 		this.#sandbox = sandboxConfig;
@@ -619,11 +647,25 @@ var MastraFactory = class {
 				});
 				return repository ?? null;
 			} } : {},
-			...typeof githubIntegration?.ingestLinkedRepositoryBacklog === "function" ? { onProjectRepositoryLinked: ({ orgId, projectRepository }) => {
-				githubIntegration.ingestLinkedRepositoryBacklog({
-					orgId,
-					projectRepositoryId: projectRepository.id
-				}).catch((error) => {
+			...githubIntegration || gitlabIntegration ? { onProjectRepositoryLinked: ({ orgId, projectRepository }) => {
+				(async () => {
+					if (githubIntegration && await sourceControlStorage.forIntegration("github").projectRepositories.get({
+						orgId,
+						id: projectRepository.id
+					})) await githubIntegration.ingestLinkedRepositoryBacklog({
+						orgId,
+						projectRepositoryId: projectRepository.id
+					});
+					else if (gitlabIntegration) {
+						if (await sourceControlStorage.forIntegration("gitlab").projectRepositories.get({
+							orgId,
+							id: projectRepository.id
+						})) await gitlabIntegration.ingestLinkedRepositoryBacklog({
+							orgId,
+							projectRepositoryId: projectRepository.id
+						});
+					}
+				})().catch((error) => {
 					console.warn("[factory] Failed to import a linked repository backlog:", error);
 				});
 			} } : {},
@@ -1300,7 +1342,6 @@ var MastraFactory = class {
 		await this.#dispatcher?.stop();
 	}
 };
-//#endregion
 export { MastraFactory };
 
 //# sourceMappingURL=factory.js.map