build(deps): bump @mastra/core from 1.52.1 to 1.55.0

[dependabot]

Bumps @mastra/core from 1.52.1 to 1.55.0.

Release notes

Sourced from @​mastra/core's releases.

July 30, 2026

Highlights

In-process Code Mode execution (no workspace sandbox required)

Code Mode transports can now declare requiresSandbox: false, letting createCodeMode() run without a workspace sandbox for in-process execution boundaries. This enables secure in-process runtimes like V8 isolates and exports sanitizeToolId so transports can share consistent external_* naming.

New @mastra/isolated-vm package for V8-isolated Code Mode

Introduces @mastra/isolated-vm with IsolatedVmCodeModeTransport, running model-authored programs inside an in-process V8 isolate with no filesystem/network/process access (only bridged external_* tools). Note: requires isolated-vm native addon and Node 20+ hosts must start with --no-node-snapshot.

Built-in provider-native Web Search tool

@mastra/core adds webSearchTool, a first-party web search tool that resolves to provider-native search when supported by the configured model/provider, simplifying “current info” agent setups.

Stored agent drafts via autoPublish (Server + JS SDK)

Both @mastra/server and @mastra/client-js add autoPublish to stored agent creation so you can create an initial unpublished draft for review before publishing (existing calls still publish immediately by default).

New Factory channel identity domain + channels integration slot

@mastra/factory adds a channel-identity storage domain to link chat-platform senders to Factory users, plus a channels() integration slot to attach an AgentControllerChannels during prepare() so inbound platform messages can drive the same agents as the web UI.

Breaking Changes

• ChannelHandler context parameter is now required: the 4th parameter is ctx: ChannelHandlerContext (non-optional). Code that calls a ChannelHandler-typed function with only three args must be updated to pass ctx.

Changelog

@​mastra/core@1.55.0

Minor Changes

• Added support for Code Mode transports that provide their own execution boundary. A transport can now declare requiresSandbox: false and createCodeMode() will run it without a workspace sandbox, which enables in-process transports such as IsolatedVmCodeModeTransport from @mastra/isolated-vm: (#20359)

  import { createCodeMode } from '@mastra/core/tools';
  import { IsolatedVmCodeModeTransport } from '@mastra/isolated-vm';
  // No sandbox needed — the V8 isolate is the execution boundary
  const { tool, instructions } = createCodeMode({ tools }, new IsolatedVmCodeModeTransport());

  Also fixed the generated Code Mode instructions to describe isolation accurately instead of always claiming the program runs fully sandboxed, since the actual boundary depends on the configured sandbox and transport. The sanitizeToolId helper used for external_* naming is now exported from @mastra/core/tools so transports can reuse it instead of duplicating it.

• Added retry callbacks for stream error policies and ensured explicit matcher policies override provider retry metadata. (#19724)

• Channel handlers can now contribute to the request context of the run they start. (#20060)

  ChannelHandlerContext gains a requestContext field holding the RequestContext for the run the inbound message is about to start. It is constructed fresh for every message, and a handler may write to it before calling defaultHandler. Core then adds its own channel and render-context entries and dispatches with the same instance, so anything the handler wrote reaches the run.

  import { AgentControllerChannels } from '@mastra/core/channels';
  const channels = new AgentControllerChannels({
  adapters,
  handlers: {

... (truncated)

Commits

• bccb45d chore: version - exit prerelease mode
• 4696963 fix(core): persist delegation prompt exactly once in sub-agent threads (#20174)
• 6b86123 chore: version packages (alpha) (#20419)
• 723aa54 feat(factory): stricter review agent — weigh existing comments, calibrated ve...
• ef8a7ce chore: version packages (alpha) (#20358)
• 07f5b4b fix(core): avoid serializing result comparisons (#20340)
• 9c16d7b chore: regenerate providers and docs [skip ci]
• 55c9e24 Run Slack messages as the sender's Mastra tenant (#20060)
• cfb2899 chore: version packages
• ba369f2 feat(isolated-vm): add IsolatedVmCodeModeTransport for in-process Code Mode i...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Coverage Report for server

Status	Category	Percentage	Covered / Total
🟢	Lines	98.53% (🎯 97%)	3019 / 3064
🟢	Statements	97.88% (🎯 96%)	3152 / 3220
🟢	Functions	99.22% (🎯 97%)	512 / 516
🟢	Branches	88.51% (🎯 87%)	1195 / 1350

File Coverage

No changed files found.

Generated in workflow #1679 for commit 723b405 by the Vitest Coverage Report Action

[github-actions]

Coverage Report for web

Status	Category	Percentage	Covered / Total
🟢	Lines	97.65% (🎯 96%)	1252 / 1282
🟢	Statements	96.17% (🎯 95%)	1331 / 1384
🟢	Functions	96.56% (🎯 95%)	506 / 524
🟢	Branches	89.18% (🎯 88%)	759 / 851

File Coverage

No changed files found.

Generated in workflow #1679 for commit 723b405 by the Vitest Coverage Report Action

[github-actions]

Coverage Report for shared

Status	Category	Percentage	Covered / Total
🟢	Lines	99.07% (🎯 98%)	215 / 217
🟢	Statements	81.2% (🎯 80%)	229 / 282
🟢	Functions	100% (🎯 98%)	71 / 71
🟢	Branches	62.83% (🎯 62%)	93 / 148

File Coverage

No changed files found.

Generated in workflow #1679 for commit 723b405 by the Vitest Coverage Report Action

[github-actions]

Coverage Report for widget

Status	Category	Percentage	Covered / Total
🟢	Lines	100% (🎯 98%)	207 / 207
🟢	Statements	99.55% (🎯 96%)	222 / 223
🟢	Functions	100% (🎯 98%)	40 / 40
🟢	Branches	95.41% (🎯 92%)	104 / 109

File Coverage

No changed files found.

Generated in workflow #1679 for commit 723b405 by the Vitest Coverage Report Action

[dependabot]

Superseded by #1008.