create-factory 0.3.1-alpha.3 → 0.4.0-alpha.5

package/README.md

@@ -33,7 +33,7 @@ pnpm create factory@latest
 
 The interactive setup asks where to create the project and helps configure your Mastra Factory project.
 
-By default, the setup wizard provisions Mastra platform resources during setup, enabling you to fully run Mastra Factory on platform or locally with cloud-backed capabilities. If you prefer to [self-host](https://factory.mastra.ai/deployment#self-host) Mastra Factory, run the setup with the `--no-platform` flag.
+By default, the setup wizard scaffolds the [platform template](https://github.com/mastra-ai/template-factory) and provisions Mastra platform resources during setup, enabling you to fully run Mastra Factory on platform or locally with cloud-backed capabilities. If you prefer to [self-host](https://factory.mastra.ai/deployment#self-host) Mastra Factory, run the setup with the `--no-platform` flag. It scaffolds the [self-hosted template](https://github.com/mastra-ai/template-factory-self-hosted) instead, which uses PostgreSQL, WorkOS, a GitHub App, and local sandboxes. Either way, the setup writes a freshly generated `FACTORY_CREDENTIAL_ENCRYPTION_KEY` to `.env` when the template uses one, so stored credentials are encrypted from the first start.
 
 ```bash
 npx create-factory@latest -- --no-platform

package/dist/index.js

@@ -4,12 +4,13 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
 import { PosthogAnalytics, setAnalytics } from "mastra/dist/analytics/index.js";
+import { randomBytes } from "node:crypto";
 import * as p from "@clack/prompts";
 import { LoginCancelledError, MASTRA_PLATFORM_API_URL, authHeaders, extractApiErrorDetail, fetchOrgs, getToken, loadCredentials, platformFetch, resolveCurrentOrg } from "mastra/internal/auth";
 import color from "picocolors";
 import { x } from "tinyexec";
 import fs$1 from "node:fs/promises";
-//#region src/env.ts
+// src/env.ts
 /**
 * Idempotently update a `.env` file.
 *
@@ -42,8 +43,7 @@ function upsertEnvFile(envPath, updates) {
 		fs.chmodSync(envPath, 384);
 	} catch {}
 }
-//#endregion
-//#region src/platform.ts
+// src/platform.ts
 /**
 * Common failure path: read `detail`/`message` out of the JSON body if the
 * response wasn't JSON-parseable, fall back to the raw text.
@@ -218,8 +218,7 @@ function composeSignals(outer, inner) {
 	else inner.addEventListener("abort", () => abort(inner.reason), { once: true });
 	return controller.signal;
 }
-//#endregion
-//#region src/utils/clone.ts
+// src/utils/clone.ts
 /** Rewrite the scaffolded package.json name to the chosen project name. */
 async function renameProject(projectPath, projectName) {
 	const pkgPath = path.join(projectPath, "package.json");
@@ -295,8 +294,7 @@ async function cloneTemplate(repoUrl, targetPath) {
 		});
 	}
 }
-//#endregion
-//#region src/utils/pm.ts
+// src/utils/pm.ts
 function detectPackageManager() {
 	const userAgent = process.env.npm_config_user_agent || "";
 	const execPath = process.env.npm_execpath || "";
@@ -320,8 +318,6 @@ function getInstallArgs(packageManager) {
 		default: return ["install"];
 	}
 }
-//#endregion
-//#region src/create.ts
 const PROJECT_REGION_OPTIONS = [{
 	value: "eu",
 	label: "🇪🇺 eu"
@@ -361,13 +357,14 @@ async function create(args) {
 	const spinner = p.spinner();
 	spinner.start("Downloading the Mastra Factory template...");
 	try {
-		await cloneTemplate(args.template, projectPath);
+		await cloneTemplate(args.template ?? (args.noPlatform ? "https://github.com/mastra-ai/template-factory-self-hosted" : "https://github.com/mastra-ai/template-factory"), projectPath);
 		await renameProject(projectPath, projectName);
 		const envPath = path.join(projectPath, ".env");
 		fs.copyFileSync(path.join(projectPath, ".env.example"), envPath);
 		try {
 			fs.chmodSync(envPath, 384);
 		} catch {}
+		seedCredentialEncryptionKey(envPath);
 		spinner.stop("Template downloaded.");
 	} catch (err) {
 		spinner.stop("Template download failed.");
@@ -603,6 +600,17 @@ function sanitizeDatabaseName(projectName) {
 	return (projectName.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/^-+|-+$/g, "") || "factory").slice(0, 64);
 }
 /**
+* Fill the template's empty `FACTORY_CREDENTIAL_ENCRYPTION_KEY` placeholder
+* with a fresh AES-256 key so stored credentials are encrypted from the first
+* boot. Templates that don't declare the key, or that already set one, are
+* left alone.
+*/
+function seedCredentialEncryptionKey(envPath) {
+	const env = fs.readFileSync(envPath, "utf8");
+	if (!/^\s*(#\s*)?FACTORY_CREDENTIAL_ENCRYPTION_KEY\s*=\s*$/m.test(env)) return;
+	upsertEnvFile(envPath, { FACTORY_CREDENTIAL_ENCRYPTION_KEY: randomBytes(32).toString("base64") });
+}
+/**
 * Append `.env` to the scaffolded project's `.gitignore` if it isn't already
 * ignored. Runs before the initial `git add -A` so freshly-provisioned platform
 * credentials (MASTRA_PLATFORM_SECRET_KEY, DATABASE_URL) never reach the
@@ -622,8 +630,7 @@ function ensureEnvGitignored(projectPath) {
 	const prefix = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
 	fs.writeFileSync(gitignorePath, `${existing}${prefix}\n# Added by create-factory to protect platform credentials\n.env\n`);
 }
-//#endregion
-//#region src/utils/redact.ts
+// src/utils/redact.ts
 /**
 * Sanitizes error messages before they are sent to analytics.
 *
@@ -669,8 +676,7 @@ function redactError(error, sensitiveValues = []) {
 	const message = error instanceof Error ? error.message : String(error);
 	return new Error(redactErrorMessage(message, sensitiveValues));
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 const pkg = JSON.parse(readFileSync(path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf8"));
 const analytics = new PosthogAnalytics({
 	apiKey: "phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT",
@@ -679,12 +685,11 @@ const analytics = new PosthogAnalytics({
 });
 setAnalytics(analytics);
 const program = new Command();
-const DEFAULT_TEMPLATE_REPO = "https://github.com/mastra-ai/softwarefactory-template";
-program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL)", DEFAULT_TEMPLATE_REPO).option("--no-platform", "Skip Mastra platform sign-in, project, and Neon provisioning").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
+program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL). Defaults to the platform template, or the self-hosted template with --no-platform").option("--no-platform", "Skip Mastra platform provisioning and scaffold the self-hosted template").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
 	const region = args.region ? String(args.region) : void 0;
 	const validRegion = region === "eu" || region === "us" ? region : void 0;
 	const sensitiveValues = [
-		args.template === DEFAULT_TEMPLATE_REPO ? void 0 : args.template,
+		args.template,
 		args.org ? String(args.org) : void 0,
 		validRegion ? void 0 : region,
 		projectNameArg
@@ -694,7 +699,7 @@ program.name("create-factory").description("Create a new Mastra Factory project"
 		await analytics.trackCommandExecution({
 			command: "create-factory",
 			args: {
-				default_template: args.template === DEFAULT_TEMPLATE_REPO,
+				default_template: args.template === void 0,
 				no_platform: args.platform === false,
 				has_org: Boolean(args.org),
 				region: validRegion ?? (region ? "invalid" : void 0)
@@ -727,5 +732,4 @@ try {
 } finally {
 	await analytics.shutdown(1e3);
 }
-//#endregion
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-factory",
-  "version": "0.3.1-alpha.3",
+  "version": "0.4.0-alpha.5",
   "description": "Create a Mastra Factory project: an agent-powered software delivery environment built on Mastra. Run `npm create factory` to scaffold and get started.",
   "type": "module",
   "license": "Apache-2.0",
@@ -32,14 +32,14 @@
     "ai"
   ],
   "dependencies": {
-    "@clack/prompts": "^1.7.0",
+    "@clack/prompts": "^1.8.1",
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
-    "tinyexec": "^1.2.4",
-    "mastra": "1.36.0-alpha.3"
+    "tinyexec": "^1.3.1",
+    "mastra": "1.36.0-alpha.5"
   },
   "devDependencies": {
-    "@types/node": "22.20.5",
+    "@types/node": "22.19.15",
     "tsdown": "0.23.1",
     "typescript": "^7.0.2",
     "vitest": "4.1.12",