create-factory 0.3.1-alpha.4 → 0.4.0-alpha.6

package/README.md

@@ -33,7 +33,7 @@ pnpm create factory@latest
 
 The interactive setup asks where to create the project and helps configure your Mastra Factory project.
 
-By default, the setup wizard provisions Mastra platform resources during setup, enabling you to fully run Mastra Factory on platform or locally with cloud-backed capabilities. If you prefer to [self-host](https://factory.mastra.ai/deployment#self-host) Mastra Factory, run the setup with the `--no-platform` flag.
+By default, the setup wizard scaffolds the [platform template](https://github.com/mastra-ai/template-factory) and provisions Mastra platform resources during setup, enabling you to fully run Mastra Factory on platform or locally with cloud-backed capabilities. If you prefer to [self-host](https://factory.mastra.ai/deployment#self-host) Mastra Factory, run the setup with the `--no-platform` flag. It scaffolds the [self-hosted template](https://github.com/mastra-ai/template-factory-self-hosted) instead, which uses PostgreSQL, WorkOS, a GitHub App, and local sandboxes. Either way, the setup writes a freshly generated `FACTORY_CREDENTIAL_ENCRYPTION_KEY` to `.env` when the template uses one, so stored credentials are encrypted from the first start.
 
 ```bash
 npx create-factory@latest -- --no-platform

package/dist/index.js

@@ -4,6 +4,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
 import { PosthogAnalytics, setAnalytics } from "mastra/dist/analytics/index.js";
+import { randomBytes } from "node:crypto";
 import * as p from "@clack/prompts";
 import { LoginCancelledError, MASTRA_PLATFORM_API_URL, authHeaders, extractApiErrorDetail, fetchOrgs, getToken, loadCredentials, platformFetch, resolveCurrentOrg } from "mastra/internal/auth";
 import color from "picocolors";
@@ -317,7 +318,6 @@ function getInstallArgs(packageManager) {
 		default: return ["install"];
 	}
 }
-// src/create.ts
 const PROJECT_REGION_OPTIONS = [{
 	value: "eu",
 	label: "🇪🇺 eu"
@@ -357,13 +357,14 @@ async function create(args) {
 	const spinner = p.spinner();
 	spinner.start("Downloading the Mastra Factory template...");
 	try {
-		await cloneTemplate(args.template, projectPath);
+		await cloneTemplate(args.template ?? (args.noPlatform ? "https://github.com/mastra-ai/template-factory-self-hosted" : "https://github.com/mastra-ai/template-factory"), projectPath);
 		await renameProject(projectPath, projectName);
 		const envPath = path.join(projectPath, ".env");
 		fs.copyFileSync(path.join(projectPath, ".env.example"), envPath);
 		try {
 			fs.chmodSync(envPath, 384);
 		} catch {}
+		seedCredentialEncryptionKey(envPath);
 		spinner.stop("Template downloaded.");
 	} catch (err) {
 		spinner.stop("Template download failed.");
@@ -599,6 +600,17 @@ function sanitizeDatabaseName(projectName) {
 	return (projectName.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/^-+|-+$/g, "") || "factory").slice(0, 64);
 }
 /**
+* Fill the template's empty `FACTORY_CREDENTIAL_ENCRYPTION_KEY` placeholder
+* with a fresh AES-256 key so stored credentials are encrypted from the first
+* boot. Templates that don't declare the key, or that already set one, are
+* left alone.
+*/
+function seedCredentialEncryptionKey(envPath) {
+	const env = fs.readFileSync(envPath, "utf8");
+	if (!/^\s*(#\s*)?FACTORY_CREDENTIAL_ENCRYPTION_KEY\s*=\s*$/m.test(env)) return;
+	upsertEnvFile(envPath, { FACTORY_CREDENTIAL_ENCRYPTION_KEY: randomBytes(32).toString("base64") });
+}
+/**
 * Append `.env` to the scaffolded project's `.gitignore` if it isn't already
 * ignored. Runs before the initial `git add -A` so freshly-provisioned platform
 * credentials (MASTRA_PLATFORM_SECRET_KEY, DATABASE_URL) never reach the
@@ -673,12 +685,11 @@ const analytics = new PosthogAnalytics({
 });
 setAnalytics(analytics);
 const program = new Command();
-const DEFAULT_TEMPLATE_REPO = "https://github.com/mastra-ai/softwarefactory-template";
-program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL)", DEFAULT_TEMPLATE_REPO).option("--no-platform", "Skip Mastra platform sign-in, project, and Neon provisioning").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
+program.name("create-factory").description("Create a new Mastra Factory project").argument("[project-name]", "Directory name of the project").option("--template <template-name>", "Create a project from a template (public GitHub URL). Defaults to the platform template, or the self-hosted template with --no-platform").option("--no-platform", "Skip Mastra platform provisioning and scaffold the self-hosted template").option("--org <org>", "Mastra organization id or name — skips the interactive org picker").option("--region <region>", "Platform project region (eu or us); prompts when omitted").version(pkg.version, "-v, --version").action(async (projectNameArg, args) => {
 	const region = args.region ? String(args.region) : void 0;
 	const validRegion = region === "eu" || region === "us" ? region : void 0;
 	const sensitiveValues = [
-		args.template === DEFAULT_TEMPLATE_REPO ? void 0 : args.template,
+		args.template,
 		args.org ? String(args.org) : void 0,
 		validRegion ? void 0 : region,
 		projectNameArg
@@ -688,7 +699,7 @@ program.name("create-factory").description("Create a new Mastra Factory project"
 		await analytics.trackCommandExecution({
 			command: "create-factory",
 			args: {
-				default_template: args.template === DEFAULT_TEMPLATE_REPO,
+				default_template: args.template === void 0,
 				no_platform: args.platform === false,
 				has_org: Boolean(args.org),
 				region: validRegion ?? (region ? "invalid" : void 0)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-factory",
-  "version": "0.3.1-alpha.4",
+  "version": "0.4.0-alpha.6",
   "description": "Create a Mastra Factory project: an agent-powered software delivery environment built on Mastra. Run `npm create factory` to scaffold and get started.",
   "type": "module",
   "license": "Apache-2.0",
@@ -36,7 +36,7 @@
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
     "tinyexec": "^1.3.1",
-    "mastra": "1.36.0-alpha.4"
+    "mastra": "1.36.0-alpha.6"
   },
   "devDependencies": {
     "@types/node": "22.19.15",