We completely revamped 𝚌𝚛𝚎𝚊𝚝𝚎 𝚖𝚊𝚜𝚝𝚛𝚊 and replaced the humble weather agent with a powerful harness template! It can: - Code in a sandbox - Create a task list - Search and fetch the web - Remember anything - Run for days Quick video showing you how it works:

One of the coolest things about Mastra sandboxes is the ability to FUSE-mount filesystems like S3 Mounts can be read-only for seeding files Or you can give an ephemeral sandbox persistent storage. Even if the sandbox is destroyed and recreated, it can reconnect to the same filesystem and access the same files!

🚨 SlowMist TI Alert 🚨 A coordinated npm supply chain attack affecting 140+ @mastra/* packages. The affected packages added a dependency on easy-day-js@^1.11.21, which can be automatically resolved during installation to the malicious version easy-day-js@1.11.22, triggering attacker-controlled code through an install-time hook. Potential attacker actions include install-time code execution, persistence on Windows/macOS/Linux, browser history collection, cryptocurrency wallet extension inventory, credential or CI secret exposure through follow-on tasking, and data exfiltration. Treat any system that installed affected @mastra/* versions as potentially compromised: remove malicious versions and easy-day-js, delete node_modules and package caches, reinstall known-clean versions with verified lockfiles, isolate impacted hosts, preserve logs, remove persistence artifacts, and rotate npm, GitHub, cloud, SSH/Git, CI/CD, and wallet-related credentials where exposure is possible. As always, stay vigilant!

Huge TypeScript AI day today! Live from London 09.30-16.30: 9:40 - 9:55 AM: Opening Keynote → Sam Bhagwat, Shane Thomas, Abhi Aiyer, Co-Founders @ Mastra 10:00 - 10:15 AM: Evals Are the New TDD → RL Nabors, Developer Experience @ Arize 10:20 - 10:35 AM: Deploying AI Agents Where Your Customers Actually Want Them → Raphaël Titsworth-Morin, Senior Developer & Evangelist @ Defang 10:40 - 10:55 AM: What I Learned Shipping FGA to Production → Tiffany Lozenski, Founding Product Engineer @ Palette 11:30 - 11:50 AM: The CLI Is Dead, Long Live The CLI → Jan Peer Stöcklmair, Senior Software Engineer @ Sentry 11:55 - 12:15 PM: Agentic UX: How The AG-UI Protocol Is Redefining AI-Driven User Experience → Tyler Slaton, Founding Engineer & Head of Open Source @ CopilotKit 12:20 - 12:35 PM: Building an OpenSearch Research Agent at Scale → Alfonso Graziano, AI Tech Lead @ Nearform 1:45 - 2:00 PM: Why Monetizing Agents Needs Different Infrastructure → John Yeo, CTO @ Autumn → Charlie Lamb, Founding Engineer @ Autumn 2:05 - 2:25 PM: Even TS Agents Need Retrieval → Carly Richmond, Developer Advocate Lead @ Elastic 2:30 - 2:55 PM: From Magic to Harness: Building an AI Agent for a 25-Product SaaS Company → Ilyà Zayats, CTO @ Factorial 3:00 - 3:15 PM: Designing Zero Trust Harnesses → Ohans Emmanuel, Co-Founder @ Coldtea 3:20 - 3:35 PM: Building Cloud Coding Agents on Prisma Compute → Tyler Hogarth, Head of Engineering @ Prisma 3:40 - 3:55 PM: What We Learned Building Our Own Agent Harness → Danilo Delizia, AI Architect @ commercetools 4:00 - 4:20 PM: The Agentic Repository Automation Revolution → Don Syme, Principal Researcher @ GitHub Next 4:25 - 4:30 PM: Closing Remarks → Sam Bhagwat, Shane Thomas, Abhi Aiyer, Co-Founders @ Mastra