create-factory 0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150

package/CHANGELOG.md

@@ -0,0 +1,437 @@
+# create-factory
+
+## 0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150
+
+### Patch Changes
+
+- Updated dependencies [[`3f8e2f2`](https://github.com/mastra-ai/mastra/commit/3f8e2f2006588171348acdb6dfcba8a37fed1106), [`1d0b2d8`](https://github.com/mastra-ai/mastra/commit/1d0b2d8712f330992bf0c8464e093d14961f83b4), [`b95e551`](https://github.com/mastra-ai/mastra/commit/b95e551e2fdb149848dcdbd5d8f46c6736d6bff4), [`01c14ae`](https://github.com/mastra-ai/mastra/commit/01c14aed071c9580678036f21cb5eb6079c0ca80), [`b35ed6f`](https://github.com/mastra-ai/mastra/commit/b35ed6f7c257583eafbad6afa3320c88b26d8112), [`37a5de6`](https://github.com/mastra-ai/mastra/commit/37a5de698003e33b33ae647533461444383c1056), [`3ea362f`](https://github.com/mastra-ai/mastra/commit/3ea362f28d36b7a6b248d0d05df3d14d83b50c39), [`a46aba2`](https://github.com/mastra-ai/mastra/commit/a46aba2249ef3cb965431eb063b9281f7e5e1eca)]:
+  - mastra@0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150
+
+## 0.1.5-alpha.2
+
+### Patch Changes
+
+- Updated dependencies [[`3f8e2f2`](https://github.com/mastra-ai/mastra/commit/3f8e2f2006588171348acdb6dfcba8a37fed1106), [`1d0b2d8`](https://github.com/mastra-ai/mastra/commit/1d0b2d8712f330992bf0c8464e093d14961f83b4), [`01c14ae`](https://github.com/mastra-ai/mastra/commit/01c14aed071c9580678036f21cb5eb6079c0ca80)]:
+  - mastra@1.22.0-alpha.2
+
+## 0.1.5-alpha.1
+
+### Patch Changes
+
+- Updated dependencies [[`b35ed6f`](https://github.com/mastra-ai/mastra/commit/b35ed6f7c257583eafbad6afa3320c88b26d8112), [`a46aba2`](https://github.com/mastra-ai/mastra/commit/a46aba2249ef3cb965431eb063b9281f7e5e1eca)]:
+  - mastra@1.21.1-alpha.1
+
+## 0.1.5-alpha.0
+
+### Patch Changes
+
+- Updated dependencies [[`b95e551`](https://github.com/mastra-ai/mastra/commit/b95e551e2fdb149848dcdbd5d8f46c6736d6bff4), [`37a5de6`](https://github.com/mastra-ai/mastra/commit/37a5de698003e33b33ae647533461444383c1056), [`3ea362f`](https://github.com/mastra-ai/mastra/commit/3ea362f28d36b7a6b248d0d05df3d14d83b50c39)]:
+  - mastra@1.21.1-alpha.0
+
+## 0.1.4
+
+### Patch Changes
+
+- Improved contributor guidance for the Factory scaffolder. ([#20327](https://github.com/mastra-ai/mastra/pull/20327))
+
+- Updated dependencies [[`6b1e467`](https://github.com/mastra-ai/mastra/commit/6b1e46731b3062a3c26c1c5889299eb186bbf08c), [`1d3a2cf`](https://github.com/mastra-ai/mastra/commit/1d3a2cf9111d947c344c4168579fb244c52ee9f8), [`4b9dc7a`](https://github.com/mastra-ai/mastra/commit/4b9dc7a6a3e7d96831efc2a1e6a7fb0d7632ca82), [`c539a25`](https://github.com/mastra-ai/mastra/commit/c539a25b620eb27c92ac8585b2740981ba1c28bf)]:
+  - mastra@1.21.0
+
+## 0.1.4-alpha.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.21.0-alpha.3
+
+## 0.1.4-alpha.2
+
+### Patch Changes
+
+- Updated dependencies [[`6b1e467`](https://github.com/mastra-ai/mastra/commit/6b1e46731b3062a3c26c1c5889299eb186bbf08c), [`4b9dc7a`](https://github.com/mastra-ai/mastra/commit/4b9dc7a6a3e7d96831efc2a1e6a7fb0d7632ca82)]:
+  - mastra@1.21.0-alpha.2
+
+## 0.1.4-alpha.1
+
+### Patch Changes
+
+- Updated dependencies [[`1d3a2cf`](https://github.com/mastra-ai/mastra/commit/1d3a2cf9111d947c344c4168579fb244c52ee9f8)]:
+  - mastra@1.21.0-alpha.1
+
+## 0.1.4-alpha.0
+
+### Patch Changes
+
+- Improved contributor guidance for the Factory scaffolder. ([#20327](https://github.com/mastra-ai/mastra/pull/20327))
+
+- Updated dependencies [[`c539a25`](https://github.com/mastra-ai/mastra/commit/c539a25b620eb27c92ac8585b2740981ba1c28bf)]:
+  - mastra@1.21.0-alpha.0
+
+## 0.1.3
+
+### Patch Changes
+
+- Improved Factory onboarding so any key skips optional Mastra Platform setup while Ctrl+C cancels project creation. ([#20299](https://github.com/mastra-ai/mastra/pull/20299))
+
+- Generated Factory projects now use the Factory UI bundled with the Mastra CLI instead of including editable browser source and its build dependencies. ([#20246](https://github.com/mastra-ai/mastra/pull/20246))
+
+- Updated dependencies [[`6ce9581`](https://github.com/mastra-ai/mastra/commit/6ce9581ba0ef671dd04e9ad6c6290f2aa7028550)]:
+  - mastra@1.20.3
+
+## 0.1.3-alpha.4
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.3-alpha.4
+
+## 0.1.3-alpha.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.3-alpha.3
+
+## 0.1.3-alpha.2
+
+### Patch Changes
+
+- Improved Factory onboarding so any key skips optional Mastra Platform setup while Ctrl+C cancels project creation. ([#20299](https://github.com/mastra-ai/mastra/pull/20299))
+
+- Updated dependencies [[`6ce9581`](https://github.com/mastra-ai/mastra/commit/6ce9581ba0ef671dd04e9ad6c6290f2aa7028550)]:
+  - mastra@1.20.3-alpha.2
+
+## 0.1.3-alpha.1
+
+### Patch Changes
+
+- Generated Factory projects now use the Factory UI bundled with the Mastra CLI instead of including editable browser source and its build dependencies. ([#20246](https://github.com/mastra-ai/mastra/pull/20246))
+
+- Updated dependencies:
+  - mastra@1.20.3-alpha.1
+
+## 0.1.3-alpha.0
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.3-alpha.0
+
+## 0.1.2
+
+### Patch Changes
+
+- Fixed generated Factory projects to allow newly published Mastra packages when pnpm minimum release age policies are configured. ([#20104](https://github.com/mastra-ai/mastra/pull/20104))
+
+- Fixed Factory template generation during release transitions by selecting exact published package versions that match the local source release and configuring npm for compatible prerelease installs. ([#20097](https://github.com/mastra-ai/mastra/pull/20097))
+
+- Updated dependencies:
+  - mastra@1.20.2
+
+## 0.1.2-alpha.5
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.2-alpha.5
+
+## 0.1.2-alpha.4
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.2-alpha.4
+
+## 0.1.2-alpha.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.2-alpha.3
+
+## 0.1.2-alpha.2
+
+### Patch Changes
+
+- Updated dependencies:
+  - mastra@1.20.2-alpha.2
+
+## 0.1.2-alpha.1
+
+### Patch Changes
+
+- Fixed generated Factory projects to allow newly published Mastra packages when pnpm minimum release age policies are configured. ([#20104](https://github.com/mastra-ai/mastra/pull/20104))
+
+- Updated dependencies:
+  - mastra@1.20.2-alpha.1
+
+## 0.1.2-alpha.0
+
+### Patch Changes
+
+- Fixed Factory template generation during release transitions by selecting exact published package versions that match the local source release and configuring npm for compatible prerelease installs. ([#20097](https://github.com/mastra-ai/mastra/pull/20097))
+
+- Updated dependencies:
+  - mastra@1.20.2-alpha.0
+
+## 0.1.1
+
+### Patch Changes
+
+- Fixed generated Factory projects installing stale Mastra package versions. ([#20087](https://github.com/mastra-ai/mastra/pull/20087))
+
+- Fixed the Factory template sync to replace linked dependencies with the exact versions currently published under npm's latest tag. ([#20093](https://github.com/mastra-ai/mastra/pull/20093))
+
+- Updated dependencies [[`7d3a12e`](https://github.com/mastra-ai/mastra/commit/7d3a12ecfd0c4994ace2583e5497cb3a544ae350)]:
+  - mastra@1.20.1
+
+## 0.1.1-alpha.0
+
+### Patch Changes
+
+- Fixed generated Factory projects installing stale Mastra package versions. ([#20087](https://github.com/mastra-ai/mastra/pull/20087))
+
+- Updated dependencies [[`7d3a12e`](https://github.com/mastra-ai/mastra/commit/7d3a12ecfd0c4994ace2583e5497cb3a544ae350)]:
+  - mastra@1.20.1-alpha.0
+
+## 0.1.0
+
+### Minor Changes
+
+- Standardized the Factory SPA directory and simplified the generated build script because `mastra build` now packages the prebuilt UI automatically. ([#19948](https://github.com/mastra-ai/mastra/pull/19948))
+
+  Before:
+
+  ```json
+  { "build": "npm run build:ui && mastra build --dir src/mastra" }
+  ```
+
+  After:
+
+  ```json
+  { "build": "mastra build --dir src/mastra" }
+  ```
+
+  Factory assets now land in `src/mastra/public/factory/` during the build and `.mastra/output/factory/` in the deployable output, replacing the previous `ui/` path.
+
+- Added EU and US region selection when creating Factory platform projects, with a --region flag for non-interactive setup. ([#20040](https://github.com/mastra-ai/mastra/pull/20040))
+
+### Patch Changes
+
+- Updated the generated project README for the single-server setup: the Factory UI and API are both served from `http://localhost:4111`, OAuth callback instructions use the server origin, and the removed `dev:prod` / `build:ui` scripts are no longer documented. ([#20036](https://github.com/mastra-ai/mastra/pull/20036))
+
+- Apply prettier formatting to env.test.ts (post-merge follow-up) ([#19965](https://github.com/mastra-ai/mastra/pull/19965))
+
+- Harden .env handling in create-factory: tighten file permissions and skip git init when .env cannot be gitignored ([#19945](https://github.com/mastra-ai/mastra/pull/19945))
+
+  `.env` files created during scaffolding are now written with `0600` permissions so platform secrets (`MASTRA_PLATFORM_SECRET_KEY`, `DATABASE_URL`) are only readable by the owner. If the scaffolder can't add `.env` to `.gitignore` (e.g. permission denied on `.gitignore`), it now skips `git init` entirely and warns the user, so freshly-minted secrets can't accidentally be committed to the initial commit.
+
+- Make the Software Factory template installable and buildable against published packages so the sync-softwarefactory-template workflow can push it again. Three changes to the generation step: ([#20001](https://github.com/mastra-ai/mastra/pull/20001))
+
+  - Pin every synced Mastra dep to `"alpha"` instead of `"latest"` — the Mastra Factory sources on `main` are built against the alpha release train, and the previous `"latest"` default mixed release trains (worse, `@mastra/factory@latest` is currently an empty stub).
+  - Emit `.npmrc` with `legacy-peer-deps=true` so npm accepts the internally-consistent prerelease peer graph (the same relaxation pnpm applies automatically inside the monorepo).
+  - Downgrade `typescript` from tsgo (v7) to the classic compiler (`^5.9.2`) in the emitted template. The sources happily typecheck under tsgo, but `mastra build` transitively loads TypeScript via `typescript-paths`, which needs the classic `ts.sys` API tsgo doesn't expose. In the monorepo pnpm hoists classic TypeScript from another workspace package, hiding the problem; the standalone template has no hoist.
+
+  All three are annotated as temporary in the script and README — remove once the packages ship stable releases and the deployer supports tsgo.
+
+- Marked projects created by create-factory as factory-enabled on the Mastra platform. ([#19973](https://github.com/mastra-ai/mastra/pull/19973))
+
+- Changed the create-factory template sync to pin every Mastra dep to `"latest"` instead of `"alpha"`. Scaffolded projects now install the same set of Mastra packages as every other create-mastra template, and no longer ship a `.npmrc` with `legacy-peer-deps=true` (that flag only existed to accommodate the prerelease peer graph). ([#20052](https://github.com/mastra-ai/mastra/pull/20052))
+
+- The factory template now ships a pnpm-workspace.yaml with allowBuilds, preventing pnpm v10+ from exiting with ERR_PNPM_IGNORED_BUILDS during install or build. The file mirrors the mastracode/web build-approval policy minus test-only deps stripped by the template. ([#20056](https://github.com/mastra-ai/mastra/pull/20056))
+
+- Improved the create-factory sign-in and success experience: ([#20024](https://github.com/mastra-ai/mastra/pull/20024))
+
+  - When no Mastra platform session exists, the CLI now pauses with "Mastra account is required, press enter to continue..." before opening the browser auth flow instead of opening it unannounced.
+  - The success message now summarizes the infrastructure provisioned on Mastra platform (project, Postgres database, credentials in .env), notes that deployed code agent sessions run inside Mastra platform sandboxes, and links to https://projects.mastra.ai for managing the project.
+
+- Stopped writing MASTRA_SHARED_API_URL to the scaffolded project's .env during platform provisioning. Platform consumers now use their built-in default platform URL, so scaffolded factories no longer pin the API endpoint at create time. ([#20021](https://github.com/mastra-ai/mastra/pull/20021))
+
+- Added the `create-factory` CLI. It scaffolds a Mastra Software Factory project: enter a project name and the CLI clones the template, installs dependencies, and initializes git. Configuration (model providers, integrations, database) happens in the web UI on first load. ([#19609](https://github.com/mastra-ai/mastra/pull/19609))
+
+  ```bash
+  npm create factory my-factory
+  cd my-factory
+  npm run dev
+  ```
+
+- Fixed generated Factory projects to serve the UI and API from a single Mastra development server. ([#20019](https://github.com/mastra-ai/mastra/pull/20019))
+
+- Stop shipping `pnpm-workspace.yaml` and `package-lock.json` in projects scaffolded by `npm create factory`. The template generator now excludes the web project's pnpm workspace marker and lockfiles, and the sync workflow validates the template in a throwaway copy so `npm install` artifacts can no longer leak into the published template repository. ([#20041](https://github.com/mastra-ai/mastra/pull/20041))
+
+- Simplified the create-factory success message: sandboxes now appear as a bullet in the provisioned resources list so users know code agent sessions run inside Mastra platform sandboxes. ([#20062](https://github.com/mastra-ai/mastra/pull/20062))
+
+- Fixed generated Software Factory projects missing their required `@mastra/memory` dependency. ([#19878](https://github.com/mastra-ai/mastra/pull/19878))
+
+- Added platform sign-in, project creation, and Neon Postgres provisioning to the `create factory` CLI. After scaffolding, the CLI: ([#19945](https://github.com/mastra-ai/mastra/pull/19945))
+
+  - Signs the user in via the existing Mastra browser-auth flow.
+  - Creates a Mastra platform server project in the chosen organization.
+  - Mints an `sk_` organization API key scoped to the new factory.
+  - Attaches and provisions a Neon Postgres database.
+  - Writes `MASTRA_SHARED_API_URL`, `MASTRA_ORGANIZATION_ID`, `MASTRA_PROJECT_ID`, `MASTRA_PLATFORM_SECRET_KEY`, and `DATABASE_URL` to the project's `.env`.
+
+  The result is a locally-runnable factory that can talk to the Mastra platform on first `npm run dev` without any manual configuration.
+
+  **New flags:**
+
+  - `--no-platform` — skip the platform round-trip; useful when iterating on the template offline.
+  - `--region <region>` — pass a specific Neon region id through to the platform.
+
+- Updated dependencies [[`c03d857`](https://github.com/mastra-ai/mastra/commit/c03d85791d04177bdc6095cef924aec47a440b70), [`91930d6`](https://github.com/mastra-ai/mastra/commit/91930d69ae8146ded10c792387848970f1ca4b59), [`3b77e77`](https://github.com/mastra-ai/mastra/commit/3b77e7704936522e4769d29de1b5ea6901f302bd), [`8c88764`](https://github.com/mastra-ai/mastra/commit/8c88764162b32c8a24b3bf9d1ad2ec535aba5c9a), [`73db8db`](https://github.com/mastra-ai/mastra/commit/73db8db90d69ab6153c7942749f624db0d96952d), [`bfa8c05`](https://github.com/mastra-ai/mastra/commit/bfa8c056fc235f17805f1eb93e738ee81e8a8cb6), [`0182be3`](https://github.com/mastra-ai/mastra/commit/0182be35cd402209182097098e7ebc07a5a54a2a), [`c9de100`](https://github.com/mastra-ai/mastra/commit/c9de10008ff3f72911bf746294004c305674d855), [`0a50de7`](https://github.com/mastra-ai/mastra/commit/0a50de7024816171701e81ac3b69434cf5a302ea), [`f2e0c72`](https://github.com/mastra-ai/mastra/commit/f2e0c72fa27555bc59c0322b6398e7a6d990d679), [`471e34c`](https://github.com/mastra-ai/mastra/commit/471e34c399410c380d07c03abf7d3bbf2de736e0), [`7eb2707`](https://github.com/mastra-ai/mastra/commit/7eb2707cc388f929a38562fecb075064aed71d44), [`471e34c`](https://github.com/mastra-ai/mastra/commit/471e34c399410c380d07c03abf7d3bbf2de736e0), [`3b77e77`](https://github.com/mastra-ai/mastra/commit/3b77e7704936522e4769d29de1b5ea6901f302bd), [`40ae860`](https://github.com/mastra-ai/mastra/commit/40ae860a674e7ee383a02c1f990d1e050619d5e4), [`471e34c`](https://github.com/mastra-ai/mastra/commit/471e34c399410c380d07c03abf7d3bbf2de736e0), [`f2e0c72`](https://github.com/mastra-ai/mastra/commit/f2e0c72fa27555bc59c0322b6398e7a6d990d679), [`c328769`](https://github.com/mastra-ai/mastra/commit/c3287698ff8ef98dba86d415faa566fa3e5f4d56), [`471e34c`](https://github.com/mastra-ai/mastra/commit/471e34c399410c380d07c03abf7d3bbf2de736e0), [`471e34c`](https://github.com/mastra-ai/mastra/commit/471e34c399410c380d07c03abf7d3bbf2de736e0), [`51f62f0`](https://github.com/mastra-ai/mastra/commit/51f62f0f8ae3906a4b46ceb987f19c8245563cfa), [`20b159d`](https://github.com/mastra-ai/mastra/commit/20b159d8f5d8153493ec8d5b6cd2864af8ce2c8e)]:
+  - mastra@1.20.0
+
+## 0.1.0-alpha.12
+
+### Patch Changes
+
+- Updated dependencies [[`bfa8c05`](https://github.com/mastra-ai/mastra/commit/bfa8c056fc235f17805f1eb93e738ee81e8a8cb6)]:
+  - mastra@1.20.0-alpha.18
+
+## 0.1.0-alpha.11
+
+### Patch Changes
+
+- Updated dependencies [[`c9de100`](https://github.com/mastra-ai/mastra/commit/c9de10008ff3f72911bf746294004c305674d855), [`20b159d`](https://github.com/mastra-ai/mastra/commit/20b159d8f5d8153493ec8d5b6cd2864af8ce2c8e)]:
+  - mastra@1.20.0-alpha.17
+
+## 0.1.0-alpha.10
+
+### Patch Changes
+
+- Changed the create-factory template sync to pin every Mastra dep to `"latest"` instead of `"alpha"`. Scaffolded projects now install the same set of Mastra packages as every other create-mastra template, and no longer ship a `.npmrc` with `legacy-peer-deps=true` (that flag only existed to accommodate the prerelease peer graph). ([#20052](https://github.com/mastra-ai/mastra/pull/20052))
+
+- Updated dependencies [[`91930d6`](https://github.com/mastra-ai/mastra/commit/91930d69ae8146ded10c792387848970f1ca4b59)]:
+  - mastra@1.20.0-alpha.16
+
+## 0.1.0-alpha.9
+
+### Patch Changes
+
+- Simplified the create-factory success message: sandboxes now appear as a bullet in the provisioned resources list so users know code agent sessions run inside Mastra platform sandboxes. ([#20062](https://github.com/mastra-ai/mastra/pull/20062))
+
+## 0.1.0-alpha.8
+
+### Patch Changes
+
+- The factory template now ships a pnpm-workspace.yaml with allowBuilds, preventing pnpm v10+ from exiting with ERR_PNPM_IGNORED_BUILDS during install or build. The file mirrors the mastracode/web build-approval policy minus test-only deps stripped by the template. ([#20056](https://github.com/mastra-ai/mastra/pull/20056))
+
+- Updated dependencies [[`0182be3`](https://github.com/mastra-ai/mastra/commit/0182be35cd402209182097098e7ebc07a5a54a2a)]:
+  - mastra@1.20.0-alpha.15
+
+## 0.1.0-alpha.7
+
+### Minor Changes
+
+- Added EU and US region selection when creating Factory platform projects, with a --region flag for non-interactive setup. ([#20040](https://github.com/mastra-ai/mastra/pull/20040))
+
+### Patch Changes
+
+- Updated the generated project README for the single-server setup: the Factory UI and API are both served from `http://localhost:4111`, OAuth callback instructions use the server origin, and the removed `dev:prod` / `build:ui` scripts are no longer documented. ([#20036](https://github.com/mastra-ai/mastra/pull/20036))
+
+- Stop shipping `pnpm-workspace.yaml` and `package-lock.json` in projects scaffolded by `npm create factory`. The template generator now excludes the web project's pnpm workspace marker and lockfiles, and the sync workflow validates the template in a throwaway copy so `npm install` artifacts can no longer leak into the published template repository. ([#20041](https://github.com/mastra-ai/mastra/pull/20041))
+
+## 0.1.0-alpha.6
+
+### Patch Changes
+
+- Improved the create-factory sign-in and success experience: ([#20024](https://github.com/mastra-ai/mastra/pull/20024))
+
+  - When no Mastra platform session exists, the CLI now pauses with "Mastra account is required, press enter to continue..." before opening the browser auth flow instead of opening it unannounced.
+  - The success message now summarizes the infrastructure provisioned on Mastra platform (project, Postgres database, credentials in .env), notes that deployed code agent sessions run inside Mastra platform sandboxes, and links to https://projects.mastra.ai for managing the project.
+
+- Fixed generated Factory projects to serve the UI and API from a single Mastra development server. ([#20019](https://github.com/mastra-ai/mastra/pull/20019))
+
+## 0.1.0-alpha.5
+
+### Patch Changes
+
+- Stopped writing MASTRA_SHARED_API_URL to the scaffolded project's .env during platform provisioning. Platform consumers now use their built-in default platform URL, so scaffolded factories no longer pin the API endpoint at create time. ([#20021](https://github.com/mastra-ai/mastra/pull/20021))
+
+## 0.1.0-alpha.4
+
+### Minor Changes
+
+- Standardized the Vite SPA output directory to `src/mastra/public/factory/`. The template's `build` script delegates SPA building to `mastra build` (which calls `build:ui` automatically) instead of chaining it separately. ([#19948](https://github.com/mastra-ai/mastra/pull/19948))
+
+### Patch Changes
+
+- Make the Software Factory template installable and buildable against published packages so the sync-softwarefactory-template workflow can push it again. Three changes to the generation step: ([#20001](https://github.com/mastra-ai/mastra/pull/20001))
+
+  - Pin every synced Mastra dep to `"alpha"` instead of `"latest"` — the Mastra Factory sources on `main` are built against the alpha release train, and the previous `"latest"` default mixed release trains (worse, `@mastra/factory@latest` is currently an empty stub).
+  - Emit `.npmrc` with `legacy-peer-deps=true` so npm accepts the internally-consistent prerelease peer graph (the same relaxation pnpm applies automatically inside the monorepo).
+  - Downgrade `typescript` from tsgo (v7) to the classic compiler (`^5.9.2`) in the emitted template. The sources happily typecheck under tsgo, but `mastra build` transitively loads TypeScript via `typescript-paths`, which needs the classic `ts.sys` API tsgo doesn't expose. In the monorepo pnpm hoists classic TypeScript from another workspace package, hiding the problem; the standalone template has no hoist.
+
+  All three are annotated as temporary in the script and README — remove once the packages ship stable releases and the deployer supports tsgo.
+
+- Updated dependencies [[`0a50de7`](https://github.com/mastra-ai/mastra/commit/0a50de7024816171701e81ac3b69434cf5a302ea)]:
+  - mastra@1.20.0-alpha.14
+
+## 0.0.3-alpha.3
+
+### Patch Changes
+
+- The Software Factory template now pins every Mastra dep to `"latest"` instead of a caret range anchored on the current monorepo version, matching how every other create-mastra template ships. `sync-template.mjs` no longer shells out to `npm view` and no longer needs the `--tag` flag or the `legacy-peer-deps=true` `.npmrc` (which only existed to work around prerelease pins). The sync workflow no longer breaks whenever a linked package sits mid-alpha between publishes. ([#19989](https://github.com/mastra-ai/mastra/pull/19989))
+
+## 0.0.3-alpha.2
+
+### Patch Changes
+
+- Marked projects created by create-factory as factory-enabled on the Mastra platform. ([#19973](https://github.com/mastra-ai/mastra/pull/19973))
+
+- Updated dependencies:
+  - mastra@1.20.0-alpha.13
+
+## 0.0.3-alpha.1
+
+### Patch Changes
+
+- Apply prettier formatting to env.test.ts (post-merge follow-up) ([#19965](https://github.com/mastra-ai/mastra/pull/19965))
+
+- Harden .env handling in create-factory: tighten file permissions and skip git init when .env cannot be gitignored ([#19945](https://github.com/mastra-ai/mastra/pull/19945))
+
+  `.env` files created during scaffolding are now written with `0600` permissions so platform secrets (`MASTRA_PLATFORM_SECRET_KEY`, `DATABASE_URL`) are only readable by the owner. If the scaffolder can't add `.env` to `.gitignore` (e.g. permission denied on `.gitignore`), it now skips `git init` entirely and warns the user, so freshly-minted secrets can't accidentally be committed to the initial commit.
+
+- Fixed generated Software Factory projects missing their required `@mastra/memory` dependency. ([#19878](https://github.com/mastra-ai/mastra/pull/19878))
+
+- Added platform sign-in, project creation, and Neon Postgres provisioning to the `create factory` CLI. After scaffolding, the CLI: ([#19945](https://github.com/mastra-ai/mastra/pull/19945))
+
+  - Signs the user in via the existing Mastra browser-auth flow.
+  - Creates a Mastra platform server project in the chosen organization.
+  - Mints an `sk_` organization API key scoped to the new factory.
+  - Attaches and provisions a Neon Postgres database.
+  - Writes `MASTRA_SHARED_API_URL`, `MASTRA_ORGANIZATION_ID`, `MASTRA_PROJECT_ID`, `MASTRA_PLATFORM_SECRET_KEY`, and `DATABASE_URL` to the project's `.env`.
+
+  The result is a locally-runnable factory that can talk to the Mastra platform on first `npm run dev` without any manual configuration.
+
+  **New flags:**
+
+  - `--no-platform` — skip the platform round-trip; useful when iterating on the template offline.
+  - `--region <region>` — pass a specific Neon region id through to the platform.
+
+- Updated dependencies [[`8c88764`](https://github.com/mastra-ai/mastra/commit/8c88764162b32c8a24b3bf9d1ad2ec535aba5c9a), [`40ae860`](https://github.com/mastra-ai/mastra/commit/40ae860a674e7ee383a02c1f990d1e050619d5e4)]:
+  - mastra@1.20.0-alpha.12
+
+## 0.0.3-alpha.0
+
+### Patch Changes
+
+- Added the `create-factory` CLI. It scaffolds a Mastra Software Factory project: enter a project name and the CLI clones the template, installs dependencies, and initializes git. Configuration (model providers, integrations, database) happens in the web UI on first load. ([#19609](https://github.com/mastra-ai/mastra/pull/19609))
+
+  ```bash
+  npm create factory my-factory
+  cd my-factory
+  npm run dev
+  ```
+
+## 0.0.2
+
+### Patch Changes
+
+- First real scaffold release for `npm create factory`. Clones the softwarefactory template, installs dependencies, initializes git, and prints next steps. Configuration (model providers, database, integrations) happens in the web UI on first load.
+
+## 0.0.1
+
+### Patch Changes
+
+- Initial public package name claim.

package/LICENSE.md

@@ -0,0 +1,30 @@
+Portions of this software are licensed as follows:
+
+- All content that resides under any directory named "ee/" within this
+  repository, including but not limited to:
+  - `packages/core/src/auth/ee/`
+  - `packages/server/src/server/auth/ee/`
+    is licensed under the license defined in `ee/LICENSE`.
+
+- All third-party components incorporated into the Mastra Software are
+  licensed under the original license provided by the owner of the
+  applicable component.
+
+- Content outside of the above-mentioned directories or restrictions is
+  available under the "Apache License 2.0" as defined below.
+
+# Apache License 2.0
+
+Copyright (c) 2025 Kepler Software, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -0,0 +1,26 @@
+# `create-factory`
+
+`create-factory` scaffolds a Mastra Factory project.
+
+```shell
+npm create factory
+```
+
+It clones the public [`softwarefactory-template`](https://github.com/mastra-ai/softwarefactory-template), installs dependencies, and initializes Git. Run `npm create factory -- --help` for options.
+
+## Development
+
+This package owns prompts, template cloning, package-manager detection, optional Mastra platform setup, dependency installation, and Git initialization.
+
+```shell
+pnpm --filter create-factory test
+pnpm --filter create-factory check
+pnpm --filter create-factory lint
+pnpm --filter create-factory build
+```
+
+Generated project behavior belongs to the separate template repository.
+
+## License
+
+Apache-2.0

package/dist/index.js

@@ -0,0 +1,679 @@
+#! /usr/bin/env node
+import fs, { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { Command } from "commander";
+import { randomUUID } from "node:crypto";
+import os from "node:os";
+import { PostHog } from "posthog-node";
+import * as p from "@clack/prompts";
+import { LoginCancelledError, MASTRA_PLATFORM_API_URL, authHeaders, extractApiErrorDetail, fetchOrgs, getToken, loadCredentials, platformFetch, resolveCurrentOrg } from "mastra/internal/auth";
+import color from "picocolors";
+import { x } from "tinyexec";
+import fs$1 from "node:fs/promises";
+//#region src/analytics.ts
+/**
+* Minimal PostHog analytics for create-factory, mirroring the
+* create-mastra pattern (same project key, same opt-out env var, same
+* ~/.mastra/analytics.json distinct-id store).
+*/
+const ANALYTICS_CONFIG_PATH = path.join(os.homedir(), ".mastra", "analytics.json");
+const POSTHOG_API_KEY = "phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT";
+const POSTHOG_HOST = "https://us.posthog.com";
+function isTelemetryEnabled() {
+	const value = process.env.MASTRA_TELEMETRY_DISABLED;
+	return !(value && value !== "0" && value.toLowerCase() !== "false");
+}
+function getOrCreateDistinctId() {
+	try {
+		if (existsSync(ANALYTICS_CONFIG_PATH)) {
+			const { distinctId } = JSON.parse(readFileSync(ANALYTICS_CONFIG_PATH, "utf-8"));
+			if (distinctId) return distinctId;
+		}
+	} catch {}
+	const distinctId = randomUUID();
+	try {
+		mkdirSync(path.dirname(ANALYTICS_CONFIG_PATH), { recursive: true });
+		writeFileSync(ANALYTICS_CONFIG_PATH, JSON.stringify({
+			distinctId,
+			sessionId: randomUUID()
+		}, null, 2));
+	} catch {}
+	return distinctId;
+}
+var Analytics = class {
+	version;
+	client;
+	distinctId = "";
+	constructor(version) {
+		this.version = version;
+		if (!isTelemetryEnabled()) return;
+		try {
+			this.distinctId = getOrCreateDistinctId();
+			this.client = new PostHog(POSTHOG_API_KEY, {
+				host: POSTHOG_HOST,
+				flushAt: 1,
+				flushInterval: 100
+			});
+		} catch {
+			this.client = void 0;
+		}
+	}
+	trackEvent(event, properties = {}) {
+		try {
+			this.client?.capture({
+				distinctId: this.distinctId,
+				event,
+				properties: {
+					...properties,
+					cli: "create-factory",
+					version: this.version
+				}
+			});
+		} catch {}
+	}
+	async shutdown(timeoutMs = 1e3) {
+		if (!this.client) return;
+		try {
+			await Promise.race([this.client.shutdown(), new Promise((resolve) => setTimeout(resolve, timeoutMs))]);
+		} catch {}
+	}
+};
+//#endregion
+//#region src/env.ts
+/**
+* Idempotently update a `.env` file.
+*
+* Replaces any existing `KEY=` line (commented or not) with `KEY=value`.
+* Appends missing keys at the end of the file. Preserves other lines
+* verbatim. Values are written raw — do not pass secrets that contain
+* newlines or leading spaces (WorkOS `sk_` keys and Neon connection strings
+* are safe).
+*/
+function upsertEnvFile(envPath, updates) {
+	const existing = fs.existsSync(envPath) ? fs.readFileSync(envPath, "utf8") : "";
+	const lines = existing === "" ? [] : existing.split("\n");
+	const remaining = new Map(Object.entries(updates));
+	const patched = lines.map((line) => {
+		const match = /^(\s*#\s*)?([A-Z][A-Z0-9_]*)\s*=/.exec(line);
+		if (!match) return line;
+		const key = match[2];
+		if (!remaining.has(key)) return line;
+		const value = remaining.get(key);
+		remaining.delete(key);
+		return `${key}=${value}`;
+	});
+	if (remaining.size > 0) {
+		if (patched.length > 0 && patched[patched.length - 1] !== "") patched.push("");
+		for (const [key, value] of remaining) patched.push(`${key}=${value}`);
+	}
+	const output = patched.join("\n");
+	fs.writeFileSync(envPath, output, { mode: 384 });
+	try {
+		fs.chmodSync(envPath, 384);
+	} catch {}
+}
+//#endregion
+//#region src/platform.ts
+/**
+* Common failure path: read `detail`/`message` out of the JSON body if the
+* response wasn't JSON-parseable, fall back to the raw text.
+*/
+async function extractError(res) {
+	const text = await res.text().catch(() => "");
+	if (!text) return `${res.status} ${res.statusText}`;
+	try {
+		const detail = extractApiErrorDetail(JSON.parse(text));
+		if (detail) return detail;
+	} catch {}
+	return text.slice(0, 500);
+}
+var PlatformApiError = class extends Error {
+	status;
+	constructor(status, message) {
+		super(message);
+		this.name = "PlatformApiError";
+		this.status = status;
+	}
+};
+/** POST /v1/server/projects — create a server project (Railway-provisioned). */
+async function createServerProject({ token, orgId, name, region }) {
+	const res = await platformFetch(`${MASTRA_PLATFORM_API_URL}/v1/server/projects`, {
+		method: "POST",
+		headers: {
+			...authHeaders(token, orgId),
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			name,
+			region,
+			factoryEnabled: true
+		})
+	});
+	if (!res.ok) throw new PlatformApiError(res.status, `Failed to create project — ${await extractError(res)}`);
+	return (await res.json()).project;
+}
+/**
+* POST /v1/auth/tokens — mint an `sk_` WorkOS org API key.
+* Returns the plaintext secret; the platform never returns it again.
+*/
+async function mintOrgApiKey({ token, orgId, keyName }) {
+	const res = await platformFetch(`${MASTRA_PLATFORM_API_URL}/v1/auth/tokens`, {
+		method: "POST",
+		headers: {
+			...authHeaders(token, orgId),
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({ name: keyName })
+	});
+	if (!res.ok) throw new PlatformApiError(res.status, `Failed to create API key — ${await extractError(res)}`);
+	return (await res.json()).secret;
+}
+/**
+* POST /v1/server/projects/:id/databases — attach a Neon Postgres database.
+* Returns immediately with `status: 'provisioning'`; poll for `ready`.
+*
+* Note: this route requires `requireRole('admin')`. Non-admin org members
+* will get a 403.
+*/
+async function attachNeonDatabase({ token, orgId, projectId, name, regionId }) {
+	const res = await platformFetch(`${MASTRA_PLATFORM_API_URL}/v1/server/projects/${encodeURIComponent(projectId)}/databases`, {
+		method: "POST",
+		headers: {
+			...authHeaders(token, orgId),
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			kind: "neon",
+			name,
+			regionId
+		})
+	});
+	if (!res.ok) {
+		if (res.status === 403) throw new PlatformApiError(403, `Attaching a database requires the admin role in your organization. Ask an org admin to run \`create-factory\`, or attach a database from the dashboard.`);
+		throw new PlatformApiError(res.status, `Failed to attach Neon database — ${await extractError(res)}`);
+	}
+	return (await res.json()).database;
+}
+/** GET /v1/server/projects/:id/databases/:dbId — status poll target. */
+async function getDatabaseStatus({ token, orgId, projectId, databaseId, signal }) {
+	const res = await platformFetch(`${MASTRA_PLATFORM_API_URL}/v1/server/projects/${encodeURIComponent(projectId)}/databases/${encodeURIComponent(databaseId)}`, {
+		headers: authHeaders(token, orgId),
+		signal
+	});
+	if (!res.ok) throw new PlatformApiError(res.status, `Failed to read database status — ${await extractError(res)}`);
+	return (await res.json()).database;
+}
+/** GET /v1/server/projects/:id/databases/:dbId/connection — only 200s when `ready`. */
+async function getDatabaseConnection({ token, orgId, projectId, databaseId }) {
+	const res = await platformFetch(`${MASTRA_PLATFORM_API_URL}/v1/server/projects/${encodeURIComponent(projectId)}/databases/${encodeURIComponent(databaseId)}/connection`, { headers: authHeaders(token, orgId) });
+	if (!res.ok) throw new PlatformApiError(res.status, `Failed to fetch connection string — ${await extractError(res)}`);
+	return await res.json();
+}
+/**
+* Poll `getDatabaseStatus` until the database is `ready`.
+*
+* Each poll is bounded by the *remaining* overall budget via a per-request
+* `AbortSignal`, so a hung `platformFetch` can't blow past `timeoutMs`. When
+* an outer `signal` is supplied it composes with the per-request timeout —
+* whichever fires first aborts the in-flight request.
+*
+* @param intervalMs how often to poll (default 2s)
+* @param timeoutMs total budget (default 60s)
+*/
+async function waitForDatabaseReady({ token, orgId, projectId, databaseId, intervalMs = 2e3, timeoutMs = 6e4, signal }) {
+	const deadline = Date.now() + timeoutMs;
+	let lastStatus = "provisioning";
+	const timeoutError = () => new PlatformApiError(504, `Neon database is still ${lastStatus} after ${Math.round(timeoutMs / 1e3)}s. Check the dashboard or retry \`mastra login\` + re-run.`);
+	while (true) {
+		signal?.throwIfAborted();
+		const remaining = deadline - Date.now();
+		if (remaining <= 0) throw timeoutError();
+		const perRequestSignal = composeSignals(signal, AbortSignal.timeout(remaining));
+		let row;
+		try {
+			row = await getDatabaseStatus({
+				token,
+				orgId,
+				projectId,
+				databaseId,
+				signal: perRequestSignal
+			});
+		} catch (err) {
+			if (err instanceof DOMException && err.name === "TimeoutError") throw timeoutError();
+			throw err;
+		}
+		lastStatus = row.status;
+		if (row.status === "ready") return row;
+		if (row.status === "failed") throw new PlatformApiError(500, `Neon provisioning failed${row.error ? ` — ${row.error}` : ""}`);
+		if (Date.now() >= deadline) throw timeoutError();
+		await new Promise((resolve) => setTimeout(resolve, intervalMs));
+	}
+}
+/**
+* Compose an outer AbortSignal with a per-request timeout signal. Uses
+* `AbortSignal.any` where available (Node ≥20.3); falls back to a manual
+* proxy for older runtimes.
+*/
+function composeSignals(outer, inner) {
+	if (!outer) return inner;
+	if (typeof AbortSignal.any === "function") return AbortSignal.any([outer, inner]);
+	const controller = new AbortController();
+	const abort = (reason) => controller.abort(reason);
+	if (outer.aborted) abort(outer.reason);
+	else outer.addEventListener("abort", () => abort(outer.reason), { once: true });
+	if (inner.aborted) abort(inner.reason);
+	else inner.addEventListener("abort", () => abort(inner.reason), { once: true });
+	return controller.signal;
+}
+//#endregion
+//#region src/utils/clone.ts
+/** Rewrite the scaffolded package.json name to the chosen project name. */
+async function renameProject(projectPath, projectName) {
+	const pkgPath = path.join(projectPath, "package.json");
+	const pkg = JSON.parse(await fs$1.readFile(pkgPath, "utf8"));
+	pkg.name = toPackageName(projectName);
+	await fs$1.writeFile(pkgPath, `${JSON.stringify(pkg, null, 2)}\n`);
+}
+/** Best-effort conversion of a directory name into a valid npm package name. */
+function toPackageName(name) {
+	return name.toLowerCase().replace(/[^a-z0-9-_.~]+/g, "-").replace(/^[-_.]+|[-_.]+$/g, "") || "mastra-factory";
+}
+async function pathExists(filePath) {
+	try {
+		await fs$1.access(filePath);
+		return true;
+	} catch (error) {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	}
+}
+async function directoryExists(dirPath) {
+	try {
+		return (await fs$1.stat(dirPath)).isDirectory();
+	} catch {
+		return false;
+	}
+}
+async function cloneTemplate(repoUrl, targetPath) {
+	if (await pathExists(targetPath)) throw new Error(`Directory ${path.basename(targetPath)} already exists`);
+	const tempRoot = await fs$1.mkdtemp(path.join(path.dirname(targetPath), `.${path.basename(targetPath)}-`));
+	const tempTarget = path.join(tempRoot, "template");
+	try {
+		try {
+			await x("npx", [
+				"degit",
+				repoUrl.replace("https://github.com/", ""),
+				tempTarget
+			], {
+				throwOnError: true,
+				nodeOptions: { cwd: process.cwd() }
+			});
+			if ((await fs$1.readdir(tempTarget)).length === 0) throw new Error("degit completed without cloning template files");
+		} catch {
+			await fs$1.rm(tempTarget, {
+				recursive: true,
+				force: true
+			});
+			try {
+				await x("git", [
+					"clone",
+					repoUrl,
+					tempTarget
+				], {
+					throwOnError: true,
+					nodeOptions: { cwd: process.cwd() }
+				});
+				const gitDir = path.join(tempTarget, ".git");
+				if (await directoryExists(gitDir)) await fs$1.rm(gitDir, {
+					recursive: true,
+					force: true
+				});
+			} catch (gitError) {
+				throw new Error(`Failed to clone repository: ${gitError instanceof Error ? gitError.message : "Unknown error"}`);
+			}
+		}
+		if (await pathExists(targetPath)) throw new Error(`Directory ${path.basename(targetPath)} already exists`);
+		await fs$1.rename(tempTarget, targetPath);
+	} finally {
+		await fs$1.rm(tempRoot, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+//#endregion
+//#region src/utils/pm.ts
+function detectPackageManager() {
+	const userAgent = process.env.npm_config_user_agent || "";
+	const execPath = process.env.npm_execpath || "";
+	if (userAgent.includes("bun")) return "bun";
+	if (userAgent.includes("yarn")) return "yarn";
+	if (userAgent.includes("pnpm")) return "pnpm";
+	if (userAgent.includes("npm")) return "npm";
+	if (execPath.includes("bun")) return "bun";
+	if (execPath.includes("yarn")) return "yarn";
+	if (execPath.includes("pnpm")) return "pnpm";
+	if (execPath.includes("npm")) return "npm";
+	return "npm";
+}
+function getInstallArgs(packageManager) {
+	switch (packageManager) {
+		case "npm": return [
+			"install",
+			"--no-audit",
+			"--no-fund"
+		];
+		default: return ["install"];
+	}
+}
+//#endregion
+//#region src/create.ts
+const PROJECT_REGION_OPTIONS = [{
+	value: "eu",
+	label: "🇪🇺 eu"
+}, {
+	value: "us",
+	label: "🇺🇸 us"
+}];
+const NEON_REGION_BY_PROJECT_REGION = {
+	eu: "aws-eu-central-1",
+	us: "aws-us-west-2"
+};
+function parseProjectRegion(region) {
+	if (region === "eu" || region === "us") return region;
+	throw new Error(`Invalid --region "${region}". Expected one of: eu, us.`);
+}
+async function create(args) {
+	p.intro(color.inverse(" Mastra Factory "));
+	const requestedRegion = args.region ? parseProjectRegion(args.region) : void 0;
+	const projectName = args.projectName ?? await p.text({
+		message: "What do you want to name your project?",
+		placeholder: "my-mastra-factory",
+		validate: (value) => {
+			if (!value?.trim()) return `Project name can't be empty`;
+			if (fs.existsSync(path.resolve(value.trim()))) return `Directory ${value.trim()} already exists`;
+		}
+	});
+	if (p.isCancel(projectName)) {
+		p.cancel("Operation cancelled");
+		process.exit(0);
+	}
+	const projectPath = path.resolve(projectName);
+	const packageManager = detectPackageManager();
+	args.analytics.trackEvent("sf_create_started", {
+		package_manager: packageManager,
+		no_platform: Boolean(args.noPlatform)
+	});
+	const spinner = p.spinner();
+	spinner.start("Downloading the Mastra Factory template...");
+	try {
+		await cloneTemplate(args.template, projectPath);
+		await renameProject(projectPath, projectName);
+		const envPath = path.join(projectPath, ".env");
+		fs.copyFileSync(path.join(projectPath, ".env.example"), envPath);
+		try {
+			fs.chmodSync(envPath, 384);
+		} catch {}
+		spinner.stop("Template downloaded.");
+	} catch (err) {
+		spinner.stop("Template download failed.");
+		throw err;
+	}
+	const installSpinner = p.spinner();
+	installSpinner.start(`Installing dependencies...`);
+	try {
+		await x(packageManager, getInstallArgs(packageManager), {
+			throwOnError: true,
+			nodeOptions: { cwd: projectPath }
+		});
+		installSpinner.stop("Dependencies installed.");
+	} catch (err) {
+		installSpinner.stop("Dependency install failed.");
+		throw new Error(`${err instanceof Error ? err.message : String(err)}\nYou can retry manually: cd ${projectName} && ${packageManager} install`);
+	}
+	let platformResult = null;
+	let platformError = null;
+	let platformSkipped = false;
+	if (!args.noPlatform) try {
+		platformResult = await runPlatformProvisioning({
+			projectName,
+			projectPath,
+			region: requestedRegion,
+			org: args.org
+		});
+	} catch (err) {
+		if (err instanceof LoginCancelledError) {
+			platformSkipped = true;
+			p.log.info("Skipping Mastra platform setup.");
+		} else {
+			platformError = err instanceof Error ? err.message : String(err);
+			p.log.warn(`Platform provisioning failed: ${platformError}`);
+		}
+	}
+	let gitignoreOk = true;
+	try {
+		ensureEnvGitignored(projectPath);
+	} catch (err) {
+		gitignoreOk = false;
+		const detail = err instanceof Error ? err.message : String(err);
+		p.log.warn(`Could not update .gitignore to protect .env (${detail}). Skipping git init to avoid committing secrets. Add ".env" to .gitignore manually before running 'git init && git add -A'.`);
+	}
+	if (gitignoreOk) try {
+		await x("git", ["init", "-q"], {
+			throwOnError: true,
+			nodeOptions: { cwd: projectPath }
+		});
+		await x("git", ["add", "-A"], {
+			throwOnError: true,
+			nodeOptions: { cwd: projectPath }
+		});
+		await x("git", [
+			"commit",
+			"-q",
+			"-m",
+			"Initial commit from create-factory"
+		], {
+			throwOnError: true,
+			nodeOptions: { cwd: projectPath }
+		});
+	} catch {
+		p.log.warn("git init failed — you can initialize the repository yourself later.");
+	}
+	args.analytics.trackEvent("sf_create_completed", {
+		package_manager: packageManager,
+		no_platform: Boolean(args.noPlatform),
+		platform_provisioned: platformResult !== null
+	});
+	const lines = [
+		color.green("Your Mastra Factory is ready!"),
+		"",
+		`${color.cyan("cd")} ${projectName}`,
+		color.cyan(`${packageManager} run dev`),
+		"",
+		`Factory UI     ${color.underline("http://localhost:4111")}`,
+		""
+	];
+	if (platformResult) lines.push(`${color.green("Provisioned on Mastra platform")} in ${color.cyan(platformResult.orgName)}:`, `  - Project ${color.cyan(platformResult.project.name)}`, `  - Postgres database (credentials written to ${color.cyan(".env")})`, `  - Sandboxes (code agent sessions run here)`, "", `Manage your project at ${color.underline("https://projects.mastra.ai")}`);
+	else if (platformSkipped) lines.push(`${color.yellow("Skipped Mastra platform setup.")} Configure ${color.cyan(".env")} manually before running.`);
+	else if (args.noPlatform) lines.push(`${color.yellow("Skipped platform provisioning (--no-platform).")} Configure ${color.cyan(".env")} manually before running.`);
+	else if (platformError) lines.push(`${color.yellow("Platform provisioning failed:")} ${platformError}`, `Any credentials that were minted before the failure have been written to ${color.cyan(".env")}. Re-run \`npx create factory\` after fixing, or fill in the rest manually from ${color.underline("https://platform.mastra.ai")}.`);
+	else lines.push("Open the Factory UI to finish setup (models, integrations, database).");
+	p.note(lines.join("\n"), "Next steps");
+}
+async function runPlatformProvisioning({ projectName, projectPath, region, org }) {
+	const envAccumulator = {};
+	const envPath = path.join(projectPath, ".env");
+	let flushed = false;
+	const flush = () => {
+		if (flushed || Object.keys(envAccumulator).length === 0) return;
+		upsertEnvFile(envPath, envAccumulator);
+		flushed = true;
+	};
+	try {
+		if (!process.env.MASTRA_API_TOKEN && !await loadCredentials()) {
+			const proceed = await p.text({
+				message: "Mastra account is required, press enter to continue...",
+				defaultValue: ""
+			});
+			if (p.isCancel(proceed)) {
+				p.cancel("Operation cancelled");
+				process.exit(0);
+			}
+		}
+		p.log.info("Signing in to Mastra…");
+		const token = await getToken(void 0, { skipOnInput: true });
+		const { orgId, orgName } = org ? await resolveOrgFromFlag(token, org) : await resolveCurrentOrg(token, { forcePrompt: true });
+		p.log.info(`Using organization ${color.cyan(orgName)}.`);
+		envAccumulator.MASTRA_ORGANIZATION_ID = orgId;
+		const projectRegion = region ?? await p.select({
+			message: "Where should your Factory project run?",
+			options: [...PROJECT_REGION_OPTIONS]
+		});
+		if (p.isCancel(projectRegion)) {
+			p.cancel("Operation cancelled");
+			process.exit(0);
+		}
+		const projectSpinner = p.spinner();
+		projectSpinner.start(`Creating platform project "${projectName}"…`);
+		let project;
+		try {
+			project = await createServerProject({
+				token,
+				orgId,
+				name: projectName,
+				region: projectRegion
+			});
+			projectSpinner.stop(`Created platform project ${color.cyan(project.slug)}.`);
+		} catch (err) {
+			projectSpinner.stop("Project creation failed.");
+			throw err;
+		}
+		envAccumulator.MASTRA_PROJECT_ID = project.id;
+		const keySpinner = p.spinner();
+		keySpinner.start("Creating platform API key…");
+		let secretKey;
+		try {
+			secretKey = await mintOrgApiKey({
+				token,
+				orgId,
+				keyName: `create-factory: ${projectName}`
+			});
+			keySpinner.stop("Platform API key created.");
+		} catch (err) {
+			keySpinner.stop("API key creation failed.");
+			throw err;
+		}
+		envAccumulator.MASTRA_PLATFORM_SECRET_KEY = secretKey;
+		const neonSpinner = p.spinner();
+		neonSpinner.start("Provisioning Neon Postgres database…");
+		let databaseUrl;
+		try {
+			const attached = await attachNeonDatabase({
+				token,
+				orgId,
+				projectId: project.id,
+				name: sanitizeDatabaseName(projectName),
+				regionId: NEON_REGION_BY_PROJECT_REGION[projectRegion]
+			});
+			const ready = await waitForDatabaseReady({
+				token,
+				orgId,
+				projectId: project.id,
+				databaseId: attached.id
+			});
+			const dbEnv = (await getDatabaseConnection({
+				token,
+				orgId,
+				projectId: project.id,
+				databaseId: ready.id
+			})).envVars.find((v) => v.name === "DATABASE_URL");
+			if (!dbEnv?.value) throw new PlatformApiError(500, "Platform connection response missing DATABASE_URL.");
+			databaseUrl = dbEnv.value;
+			neonSpinner.stop("Neon database ready.");
+		} catch (err) {
+			neonSpinner.stop("Database provisioning failed.");
+			throw err;
+		}
+		envAccumulator.DATABASE_URL = databaseUrl;
+		flush();
+		return {
+			orgId,
+			orgName,
+			project,
+			secretKey,
+			databaseUrl
+		};
+	} finally {
+		flush();
+	}
+}
+/**
+* `--org <value>` matches by org id or exact name. Not a substring match —
+* an ambiguous or non-existent value bails with a clear message instead of
+* silently picking the wrong org.
+*/
+async function resolveOrgFromFlag(token, value) {
+	const orgs = await fetchOrgs(token);
+	const match = orgs.find((o) => o.id === value || o.name === value);
+	if (!match) {
+		const available = orgs.map((o) => `${o.name} (${o.id})`).join(", ") || "(none)";
+		throw new Error(`No organization matched --org "${value}". Available: ${available}.`);
+	}
+	return {
+		orgId: match.id,
+		orgName: match.name
+	};
+}
+/**
+* Neon display-name charset: `[a-zA-Z0-9_-]+`, up to 64 chars. Drop anything
+* outside that, and clip length.
+*/
+function sanitizeDatabaseName(projectName) {
+	return (projectName.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/^-+|-+$/g, "") || "factory").slice(0, 64);
+}
+/**
+* Append `.env` to the scaffolded project's `.gitignore` if it isn't already
+* ignored. Runs before the initial `git add -A` so freshly-provisioned platform
+* credentials (MASTRA_PLATFORM_SECRET_KEY, DATABASE_URL) never reach the
+* initial commit.
+*
+* Throws if `.gitignore` cannot be written. Callers MUST treat this as fatal
+* for the git-init step when `.env` may already contain platform secrets —
+* silently continuing would stage secrets into the initial commit.
+*/
+function ensureEnvGitignored(projectPath) {
+	const gitignorePath = path.join(projectPath, ".gitignore");
+	const existing = fs.existsSync(gitignorePath) ? fs.readFileSync(gitignorePath, "utf8") : "";
+	if (existing.split(/\r?\n/).map((line) => line.trim()).some((line) => {
+		if (!line || line.startsWith("#")) return false;
+		return line === ".env" || line === ".env*" || line === "/.env" || line === "/.env*";
+	})) return;
+	const prefix = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
+	fs.writeFileSync(gitignorePath, `${existing}${prefix}\n# Added by create-factory to protect platform credentials\n.env\n`);
+}
+//#endregion
+//#region src/index.ts
+const pkg = JSON.parse(readFileSync(path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf8"));
+const analytics = new Analytics(pkg.version);
+const program = new Command();
+program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL)", "https://github.com/mastra-ai/softwarefactory-template").option("--no-platform", "Skip Mastra platform sign-in, project, and Neon provisioning").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
+	await create({
+		projectName: projectNameArg,
+		template: args.template,
+		noPlatform: args.platform === false,
+		org: args.org ? String(args.org) : void 0,
+		region: args.region ? String(args.region) : void 0,
+		analytics
+	});
+});
+try {
+	await program.parseAsync(process.argv);
+} catch (err) {
+	console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+	process.exitCode = 1;
+} finally {
+	await analytics.shutdown(1e3);
+}
+//#endregion
+export {};

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "create-factory",
+  "version": "0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150",
+  "description": "Create a Mastra Factory project: an agent-powered software delivery environment built on Mastra. Run `npm create factory` to scaffold and get started.",
+  "type": "module",
+  "license": "Apache-2.0",
+  "bin": {
+    "create-factory": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mastra-ai/mastra.git",
+    "directory": "mastracode/mastra-factory"
+  },
+  "homepage": "https://mastra.ai",
+  "bugs": {
+    "url": "https://github.com/mastra-ai/mastra/issues"
+  },
+  "keywords": [
+    "mastra",
+    "software-factory",
+    "create",
+    "scaffold",
+    "cli",
+    "agents",
+    "ai"
+  ],
+  "dependencies": {
+    "@clack/prompts": "^1.7.0",
+    "commander": "^14.0.3",
+    "picocolors": "^1.1.1",
+    "posthog-node": "^5.37.0",
+    "tinyexec": "^1.2.4",
+    "mastra": "0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150"
+  },
+  "devDependencies": {
+    "@types/node": "22.20.1",
+    "eslint": "^10.4.1",
+    "tsdown": "0.22.9",
+    "typescript": "^6.0.3",
+    "vitest": "4.1.10",
+    "@internal/lint": "0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150"
+  },
+  "scripts": {
+    "build": "tsdown --silent --config tsdown.config.ts",
+    "check": "tsc --noEmit",
+    "test": "vitest run",
+    "lint": "oxlint . && eslint .",
+    "lint:fix": "oxlint --fix . && eslint --fix ."
+  }
+}