@mastra/code-sdk 0.0.0-client-tool-results-20260912062135

package/dist/acp/server.d.ts

@@ -0,0 +1,7 @@
+import type { AgentController, AgentControllerMode } from '@mastra/core/agent-controller';
+/**
+ * Run the ACP server over stdio.
+ * This sets up the JSON-RPC stream and keeps the process alive until the client disconnects.
+ */
+export declare function runAcpServer(controller: AgentController, modes: AgentControllerMode[], cleanup?: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/acp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/acp/server.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAW,MAAM,+BAA+B,CAAC;AAGnG;;;GAGG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,mBAAmB,EAAE,EAC5B,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/acp/server.js

@@ -0,0 +1,35 @@
+import { MastraCodeAcpAgent } from "./agent.js";
+import { AgentSideConnection, ndJsonStream } from "@agentclientprotocol/sdk";
+import { randomUUID } from "crypto";
+import { Readable, Writable } from "stream";
+//#region src/acp/server.ts
+/**
+* Run the ACP server over stdio.
+* This sets up the JSON-RPC stream and keeps the process alive until the client disconnects.
+*/
+async function runAcpServer(controller, modes, cleanup) {
+	const input = Readable.toWeb(process.stdin);
+	const stream = ndJsonStream(Writable.toWeb(process.stdout), input);
+	let session;
+	let agent;
+	try {
+		session = await controller.createSession({
+			id: `acp-${randomUUID()}`,
+			ownerId: `acp-owner-${randomUUID()}`
+		});
+		const activeSession = session;
+		await new AgentSideConnection((conn) => {
+			agent = new MastraCodeAcpAgent(conn, controller, activeSession, modes);
+			return agent;
+		}, stream).closed;
+	} finally {
+		agent?.dispose();
+		session?.thread.detachFromCurrent();
+		await session?.thread.clearAndReleaseLock();
+		if (cleanup) await cleanup();
+	}
+}
+//#endregion
+export { runAcpServer };
+
+//# sourceMappingURL=server.js.map

package/dist/acp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","names":[],"sources":["../../src/acp/server.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { Readable, Writable } from 'node:stream';\nimport { AgentSideConnection, ndJsonStream } from '@agentclientprotocol/sdk';\nimport type { AgentController, AgentControllerMode, Session } from '@mastra/core/agent-controller';\nimport { MastraCodeAcpAgent } from './agent.js';\n\n/**\n * Run the ACP server over stdio.\n * This sets up the JSON-RPC stream and keeps the process alive until the client disconnects.\n */\nexport async function runAcpServer(\n  controller: AgentController,\n  modes: AgentControllerMode[],\n  cleanup?: () => Promise<void>,\n): Promise<void> {\n  // Create the ndJSON stream from stdin/stdout\n  const input = Readable.toWeb(process.stdin) as ReadableStream<Uint8Array>;\n  const output = Writable.toWeb(process.stdout) as WritableStream<Uint8Array>;\n  const stream = ndJsonStream(output, input);\n  let session: Session | undefined;\n  let agent: MastraCodeAcpAgent | undefined;\n\n  // Handle cleanup on disconnect (success or error)\n  try {\n    session = await controller.createSession({\n      id: `acp-${randomUUID()}`,\n      ownerId: `acp-owner-${randomUUID()}`,\n    });\n    const activeSession = session;\n\n    // Create the agent-side connection\n    const connection = new AgentSideConnection(conn => {\n      agent = new MastraCodeAcpAgent(conn, controller, activeSession, modes);\n      return agent;\n    }, stream);\n\n    await connection.closed;\n  } finally {\n    agent?.dispose();\n    session?.thread.detachFromCurrent();\n    await session?.thread.clearAndReleaseLock();\n    if (cleanup) {\n      await cleanup();\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAUA,eAAsB,aACpB,YACA,OACA,SACe;CAEf,MAAM,QAAQ,SAAS,MAAM,QAAQ,KAAK;CAE1C,MAAM,SAAS,aADA,SAAS,MAAM,QAAQ,MACL,GAAG,KAAK;CACzC,IAAI;CACJ,IAAI;CAGJ,IAAI;EACF,UAAU,MAAM,WAAW,cAAc;GACvC,IAAI,OAAO,WAAW;GACtB,SAAS,aAAa,WAAW;EACnC,CAAC;EACD,MAAM,gBAAgB;EAQtB,MAAM,IALiB,qBAAoB,SAAQ;GACjD,QAAQ,IAAI,mBAAmB,MAAM,YAAY,eAAe,KAAK;GACrE,OAAO;EACT,GAAG,MAEY,CAAC,CAAC;CACnB,UAAU;EACR,OAAO,QAAQ;EACf,SAAS,OAAO,kBAAkB;EAClC,MAAM,SAAS,OAAO,oBAAoB;EAC1C,IAAI,SACF,MAAM,QAAQ;CAElB;AACF"}

package/dist/acp.d.ts

@@ -0,0 +1,2 @@
+export { MastraCodeAcpAgent } from './acp/agent.js';
+//# sourceMappingURL=acp.d.ts.map

package/dist/acp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.d.ts","sourceRoot":"","sources":["../src/acp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/acp.js

@@ -0,0 +1,2 @@
+import { MastraCodeAcpAgent } from "./acp/agent.js";
+export { MastraCodeAcpAgent };

package/dist/agents/context-audit.d.ts

@@ -0,0 +1,84 @@
+import type { PromptSection } from './prompts/index.js';
+/** A single measured contributor to the context window. */
+export interface ContextAuditEntry {
+    id: string;
+    label: string;
+    /** Provenance: file path, server name, model id — whatever identifies the source. */
+    detail?: string;
+    tokens: number;
+    characters: number;
+    /** Share of the audit total, 0-100. */
+    percent: number;
+}
+/** A category of contributors (e.g. all agent instruction files). */
+export interface ContextAuditGroup {
+    id: string;
+    label: string;
+    tokens: number;
+    /** Share of the audit total, 0-100. */
+    percent: number;
+    entries: ContextAuditEntry[];
+    /** Shown alongside the group when its numbers need qualifying. */
+    note?: string;
+}
+export interface ContextAudit {
+    /** Context present before the first message: system prompt, skills, tools. */
+    startup: {
+        tokens: number;
+        percent: number;
+        groups: ContextAuditGroup[];
+    };
+    /** Context accumulated by the session: conversation and observation memory. */
+    accumulated: {
+        tokens: number;
+        percent: number;
+        groups: ContextAuditGroup[];
+    };
+    /** Startup + accumulated. Percentages elsewhere are shares of this. */
+    totalTokens: number;
+    /** Estimated rather than measured: token counts come from a heuristic estimator. */
+    estimated: true;
+}
+/** A tool definition as advertised to the model. */
+export interface ContextAuditTool {
+    name: string;
+    description?: string;
+    /** JSON schema (or any serializable shape) sent with the definition. */
+    parameters?: unknown;
+    /** MCP server that provides the tool, when it is not built in. */
+    server?: string;
+}
+export interface ContextAuditInput {
+    /** Labeled sections of the assembled system prompt. */
+    promptSections?: PromptSection[];
+    /** Labeled sections of the per-request dynamic instructions. */
+    instructionSections?: PromptSection[];
+    /** The skills catalog exactly as injected into the system message. */
+    skillsCatalog?: string;
+    /** Tool definitions advertised to the model. */
+    tools?: ContextAuditTool[];
+    /**
+     * Observation memory currently occupying the context window, either as the
+     * injected text or as a token count reported by the memory subsystem.
+     *
+     * Only observations that are actually in the context belong here.
+     * Observations that merely sit in storage cost nothing until recalled, and
+     * conflating the two is exactly the confusion this audit exists to resolve.
+     */
+    injectedObservations?: string | {
+        tokens: number;
+    };
+    /** Prompt tokens the provider reported for the most recent request. */
+    conversation?: {
+        promptTokens?: number;
+    };
+}
+/**
+ * Build a context audit from already-collected context.
+ *
+ * Percentages are shares of the audited total, not of the model's context
+ * window: window size is not exposed by the model registry, and inventing one
+ * would make every number wrong for models that disagree with the guess.
+ */
+export declare function buildContextAudit(input: ContextAuditInput): ContextAudit;
+//# sourceMappingURL=context-audit.d.ts.map

package/dist/agents/context-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-audit.d.ts","sourceRoot":"","sources":["../../src/agents/context-audit.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAC;IAC1E,+EAA+E;IAC/E,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAC;IAC9E,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC;IACtC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,uEAAuE;IACvE,YAAY,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AA2CD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAsFxE"}

package/dist/agents/context-audit.js

@@ -0,0 +1,118 @@
+import { tokenEstimate } from "../utils/token-estimator.js";
+//#region src/agents/context-audit.ts
+/**
+* Context audit — accounts for what occupies the model's context window.
+*
+* Deliberately pure: callers collect the real strings (prompt sections, the
+* injected skills catalog, tool definitions) and this module only measures and
+* groups them. That keeps the audit honest — it reports on the same text the
+* model receives rather than a description of it — and keeps it testable
+* without a live session.
+*
+* Nothing here reads file contents or secrets: entries carry labels, origins
+* and sizes only, never the underlying text, so an audit can be shown or
+* pasted without leaking whatever the context happens to contain.
+*/
+function measure(id, label, content, detail) {
+	return {
+		id,
+		label,
+		detail,
+		tokens: tokenEstimate(content),
+		characters: content.length,
+		percent: 0
+	};
+}
+function sectionEntries(sections, prefix) {
+	return sections.filter((section) => section.content.length > 0).map((section) => measure(`${prefix}:${section.id}`, section.label, section.content, section.detail));
+}
+function group(id, label, entries, note) {
+	if (entries.length === 0) return void 0;
+	return {
+		id,
+		label,
+		tokens: entries.reduce((sum, entry) => sum + entry.tokens, 0),
+		percent: 0,
+		entries,
+		note
+	};
+}
+/**
+* Group tool definitions by their provider so a chatty MCP server is visible as
+* one line rather than fifty. Per-tool entries stay available underneath.
+*/
+function toolEntries(tools) {
+	return tools.map((tool) => {
+		const serialized = [
+			tool.name,
+			tool.description ?? "",
+			tool.parameters ? JSON.stringify(tool.parameters) : ""
+		].join("\n");
+		return measure(`tool:${tool.server ?? "built-in"}:${tool.name}`, tool.name, serialized, tool.server);
+	});
+}
+function withPercent(items, total) {
+	for (const item of items) item.percent = total > 0 ? item.tokens / total * 100 : 0;
+	return items;
+}
+function sumTokens(groups) {
+	return groups.reduce((sum, entry) => sum + entry.tokens, 0);
+}
+/**
+* Build a context audit from already-collected context.
+*
+* Percentages are shares of the audited total, not of the model's context
+* window: window size is not exposed by the model registry, and inventing one
+* would make every number wrong for models that disagree with the guess.
+*/
+function buildContextAudit(input) {
+	const startupGroups = [
+		group("system-prompt", "System prompt", sectionEntries(input.promptSections ?? [], "prompt")),
+		group("dynamic-instructions", "Dynamic instructions", sectionEntries(input.instructionSections ?? [], "dynamic")),
+		group("skills", "Skills catalog", input.skillsCatalog ? [measure("skills:catalog", "Available skills", input.skillsCatalog)] : [], "Skill instructions are loaded on demand and are not counted here."),
+		group("tools", "Tool definitions", toolEntries(input.tools ?? []))
+	].filter((entry) => entry !== void 0);
+	const observationEntries = [];
+	if (typeof input.injectedObservations === "string") observationEntries.push(measure("observations:injected", "Injected into context", input.injectedObservations));
+	else if (input.injectedObservations && input.injectedObservations.tokens > 0) observationEntries.push({
+		id: "observations:injected",
+		label: "Injected into context",
+		tokens: input.injectedObservations.tokens,
+		characters: 0,
+		percent: 0
+	});
+	const startupTokens = sumTokens(startupGroups);
+	const injectedObservationTokens = observationEntries.reduce((sum, entry) => sum + entry.tokens, 0);
+	const promptTokens = input.conversation?.promptTokens ?? 0;
+	const conversationTokens = Math.max(0, promptTokens - startupTokens - injectedObservationTokens);
+	const accumulatedGroups = [group("conversation", "Conversation", promptTokens > 0 ? [{
+		id: "conversation:messages",
+		label: "Messages, tool calls and results",
+		tokens: conversationTokens,
+		characters: 0,
+		percent: 0
+	}] : [], `Derived from the provider's last request (~${promptTokens} prompt tokens) minus the startup context measured above.`), group("observations", "Observation memory", observationEntries, "Observations kept only in storage are not counted: they cost nothing until recalled.")].filter((entry) => entry !== void 0);
+	const accumulatedTokens = sumTokens(accumulatedGroups);
+	const totalTokens = startupTokens + accumulatedTokens;
+	for (const entry of [...startupGroups, ...accumulatedGroups]) withPercent(entry.entries, totalTokens);
+	withPercent(startupGroups, totalTokens);
+	withPercent(accumulatedGroups, totalTokens);
+	return {
+		startup: {
+			tokens: startupTokens,
+			percent: totalTokens > 0 ? startupTokens / totalTokens * 100 : 0,
+			groups: startupGroups
+		},
+		accumulated: {
+			tokens: accumulatedTokens,
+			percent: totalTokens > 0 ? accumulatedTokens / totalTokens * 100 : 0,
+			groups: accumulatedGroups
+		},
+		totalTokens,
+		estimated: true
+	};
+}
+//#endregion
+export { buildContextAudit };
+
+//# sourceMappingURL=context-audit.js.map

package/dist/agents/context-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-audit.js","names":[],"sources":["../../src/agents/context-audit.ts"],"sourcesContent":["/**\n * Context audit — accounts for what occupies the model's context window.\n *\n * Deliberately pure: callers collect the real strings (prompt sections, the\n * injected skills catalog, tool definitions) and this module only measures and\n * groups them. That keeps the audit honest — it reports on the same text the\n * model receives rather than a description of it — and keeps it testable\n * without a live session.\n *\n * Nothing here reads file contents or secrets: entries carry labels, origins\n * and sizes only, never the underlying text, so an audit can be shown or\n * pasted without leaking whatever the context happens to contain.\n */\nimport { tokenEstimate } from '../utils/token-estimator.js';\nimport type { PromptSection } from './prompts/index.js';\n\n/** A single measured contributor to the context window. */\nexport interface ContextAuditEntry {\n  id: string;\n  label: string;\n  /** Provenance: file path, server name, model id — whatever identifies the source. */\n  detail?: string;\n  tokens: number;\n  characters: number;\n  /** Share of the audit total, 0-100. */\n  percent: number;\n}\n\n/** A category of contributors (e.g. all agent instruction files). */\nexport interface ContextAuditGroup {\n  id: string;\n  label: string;\n  tokens: number;\n  /** Share of the audit total, 0-100. */\n  percent: number;\n  entries: ContextAuditEntry[];\n  /** Shown alongside the group when its numbers need qualifying. */\n  note?: string;\n}\n\nexport interface ContextAudit {\n  /** Context present before the first message: system prompt, skills, tools. */\n  startup: { tokens: number; percent: number; groups: ContextAuditGroup[] };\n  /** Context accumulated by the session: conversation and observation memory. */\n  accumulated: { tokens: number; percent: number; groups: ContextAuditGroup[] };\n  /** Startup + accumulated. Percentages elsewhere are shares of this. */\n  totalTokens: number;\n  /** Estimated rather than measured: token counts come from a heuristic estimator. */\n  estimated: true;\n}\n\n/** A tool definition as advertised to the model. */\nexport interface ContextAuditTool {\n  name: string;\n  description?: string;\n  /** JSON schema (or any serializable shape) sent with the definition. */\n  parameters?: unknown;\n  /** MCP server that provides the tool, when it is not built in. */\n  server?: string;\n}\n\nexport interface ContextAuditInput {\n  /** Labeled sections of the assembled system prompt. */\n  promptSections?: PromptSection[];\n  /** Labeled sections of the per-request dynamic instructions. */\n  instructionSections?: PromptSection[];\n  /** The skills catalog exactly as injected into the system message. */\n  skillsCatalog?: string;\n  /** Tool definitions advertised to the model. */\n  tools?: ContextAuditTool[];\n  /**\n   * Observation memory currently occupying the context window, either as the\n   * injected text or as a token count reported by the memory subsystem.\n   *\n   * Only observations that are actually in the context belong here.\n   * Observations that merely sit in storage cost nothing until recalled, and\n   * conflating the two is exactly the confusion this audit exists to resolve.\n   */\n  injectedObservations?: string | { tokens: number };\n  /** Prompt tokens the provider reported for the most recent request. */\n  conversation?: { promptTokens?: number };\n}\n\nfunction measure(id: string, label: string, content: string, detail?: string): ContextAuditEntry {\n  return { id, label, detail, tokens: tokenEstimate(content), characters: content.length, percent: 0 };\n}\n\nfunction sectionEntries(sections: PromptSection[], prefix: string): ContextAuditEntry[] {\n  return sections\n    .filter(section => section.content.length > 0)\n    .map(section => measure(`${prefix}:${section.id}`, section.label, section.content, section.detail));\n}\n\nfunction group(id: string, label: string, entries: ContextAuditEntry[], note?: string): ContextAuditGroup | undefined {\n  if (entries.length === 0) return undefined;\n  return { id, label, tokens: entries.reduce((sum, entry) => sum + entry.tokens, 0), percent: 0, entries, note };\n}\n\n/**\n * Group tool definitions by their provider so a chatty MCP server is visible as\n * one line rather than fifty. Per-tool entries stay available underneath.\n */\nfunction toolEntries(tools: ContextAuditTool[]): ContextAuditEntry[] {\n  return tools.map(tool => {\n    // Approximates the serialized definition: name, description and schema are\n    // what a provider sends, and the exact wire framing is provider-specific.\n    const serialized = [tool.name, tool.description ?? '', tool.parameters ? JSON.stringify(tool.parameters) : ''].join(\n      '\\n',\n    );\n    return measure(`tool:${tool.server ?? 'built-in'}:${tool.name}`, tool.name, serialized, tool.server);\n  });\n}\n\nfunction withPercent<T extends { tokens: number; percent: number }>(items: T[], total: number): T[] {\n  for (const item of items) {\n    item.percent = total > 0 ? (item.tokens / total) * 100 : 0;\n  }\n  return items;\n}\n\nfunction sumTokens(groups: ContextAuditGroup[]): number {\n  return groups.reduce((sum, entry) => sum + entry.tokens, 0);\n}\n\n/**\n * Build a context audit from already-collected context.\n *\n * Percentages are shares of the audited total, not of the model's context\n * window: window size is not exposed by the model registry, and inventing one\n * would make every number wrong for models that disagree with the guess.\n */\nexport function buildContextAudit(input: ContextAuditInput): ContextAudit {\n  const startupGroups = [\n    group('system-prompt', 'System prompt', sectionEntries(input.promptSections ?? [], 'prompt')),\n    group('dynamic-instructions', 'Dynamic instructions', sectionEntries(input.instructionSections ?? [], 'dynamic')),\n    group(\n      'skills',\n      'Skills catalog',\n      input.skillsCatalog ? [measure('skills:catalog', 'Available skills', input.skillsCatalog)] : [],\n      'Skill instructions are loaded on demand and are not counted here.',\n    ),\n    group('tools', 'Tool definitions', toolEntries(input.tools ?? [])),\n  ].filter((entry): entry is ContextAuditGroup => entry !== undefined);\n\n  const observationEntries: ContextAuditEntry[] = [];\n  if (typeof input.injectedObservations === 'string') {\n    observationEntries.push(measure('observations:injected', 'Injected into context', input.injectedObservations));\n  } else if (input.injectedObservations && input.injectedObservations.tokens > 0) {\n    observationEntries.push({\n      id: 'observations:injected',\n      label: 'Injected into context',\n      tokens: input.injectedObservations.tokens,\n      characters: 0,\n      percent: 0,\n    });\n  }\n\n  const startupTokens = sumTokens(startupGroups);\n  const injectedObservationTokens = observationEntries.reduce((sum, entry) => sum + entry.tokens, 0);\n\n  // The provider's prompt token count covers the whole request — startup\n  // context and injected observations included — so the conversation's own\n  // contribution is what is left after subtracting everything already\n  // accounted for. Using the raw prompt count would double-count all of it.\n  const promptTokens = input.conversation?.promptTokens ?? 0;\n  const conversationTokens = Math.max(0, promptTokens - startupTokens - injectedObservationTokens);\n  const conversationEntries: ContextAuditEntry[] =\n    promptTokens > 0\n      ? [\n          {\n            id: 'conversation:messages',\n            label: 'Messages, tool calls and results',\n            tokens: conversationTokens,\n            characters: 0,\n            percent: 0,\n          },\n        ]\n      : [];\n\n  const accumulatedGroups = [\n    group(\n      'conversation',\n      'Conversation',\n      conversationEntries,\n      `Derived from the provider's last request (~${promptTokens} prompt tokens) minus the startup context measured above.`,\n    ),\n    group(\n      'observations',\n      'Observation memory',\n      observationEntries,\n      'Observations kept only in storage are not counted: they cost nothing until recalled.',\n    ),\n  ].filter((entry): entry is ContextAuditGroup => entry !== undefined);\n\n  const accumulatedTokens = sumTokens(accumulatedGroups);\n  const totalTokens = startupTokens + accumulatedTokens;\n\n  for (const entry of [...startupGroups, ...accumulatedGroups]) {\n    withPercent(entry.entries, totalTokens);\n  }\n  withPercent(startupGroups, totalTokens);\n  withPercent(accumulatedGroups, totalTokens);\n\n  return {\n    startup: {\n      tokens: startupTokens,\n      percent: totalTokens > 0 ? (startupTokens / totalTokens) * 100 : 0,\n      groups: startupGroups,\n    },\n    accumulated: {\n      tokens: accumulatedTokens,\n      percent: totalTokens > 0 ? (accumulatedTokens / totalTokens) * 100 : 0,\n      groups: accumulatedGroups,\n    },\n    totalTokens,\n    estimated: true,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmFA,SAAS,QAAQ,IAAY,OAAe,SAAiB,QAAoC;CAC/F,OAAO;EAAE;EAAI;EAAO;EAAQ,QAAQ,cAAc,OAAO;EAAG,YAAY,QAAQ;EAAQ,SAAS;CAAE;AACrG;AAEA,SAAS,eAAe,UAA2B,QAAqC;CACtF,OAAO,SACJ,QAAO,YAAW,QAAQ,QAAQ,SAAS,CAAC,CAAC,CAC7C,KAAI,YAAW,QAAQ,GAAG,OAAO,GAAG,QAAQ,MAAM,QAAQ,OAAO,QAAQ,SAAS,QAAQ,MAAM,CAAC;AACtG;AAEA,SAAS,MAAM,IAAY,OAAe,SAA8B,MAA8C;CACpH,IAAI,QAAQ,WAAW,GAAG,OAAO,KAAA;CACjC,OAAO;EAAE;EAAI;EAAO,QAAQ,QAAQ,QAAQ,KAAK,UAAU,MAAM,MAAM,QAAQ,CAAC;EAAG,SAAS;EAAG;EAAS;CAAK;AAC/G;;;;;AAMA,SAAS,YAAY,OAAgD;CACnE,OAAO,MAAM,KAAI,SAAQ;EAGvB,MAAM,aAAa;GAAC,KAAK;GAAM,KAAK,eAAe;GAAI,KAAK,aAAa,KAAK,UAAU,KAAK,UAAU,IAAI;EAAE,CAAC,CAAC,KAC7G,IACF;EACA,OAAO,QAAQ,QAAQ,KAAK,UAAU,WAAW,GAAG,KAAK,QAAQ,KAAK,MAAM,YAAY,KAAK,MAAM;CACrG,CAAC;AACH;AAEA,SAAS,YAA2D,OAAY,OAAoB;CAClG,KAAK,MAAM,QAAQ,OACjB,KAAK,UAAU,QAAQ,IAAK,KAAK,SAAS,QAAS,MAAM;CAE3D,OAAO;AACT;AAEA,SAAS,UAAU,QAAqC;CACtD,OAAO,OAAO,QAAQ,KAAK,UAAU,MAAM,MAAM,QAAQ,CAAC;AAC5D;;;;;;;;AASA,SAAgB,kBAAkB,OAAwC;CACxE,MAAM,gBAAgB;EACpB,MAAM,iBAAiB,iBAAiB,eAAe,MAAM,kBAAkB,CAAC,GAAG,QAAQ,CAAC;EAC5F,MAAM,wBAAwB,wBAAwB,eAAe,MAAM,uBAAuB,CAAC,GAAG,SAAS,CAAC;EAChH,MACE,UACA,kBACA,MAAM,gBAAgB,CAAC,QAAQ,kBAAkB,oBAAoB,MAAM,aAAa,CAAC,IAAI,CAAC,GAC9F,mEACF;EACA,MAAM,SAAS,oBAAoB,YAAY,MAAM,SAAS,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC,QAAQ,UAAsC,UAAU,KAAA,CAAS;CAEnE,MAAM,qBAA0C,CAAC;CACjD,IAAI,OAAO,MAAM,yBAAyB,UACxC,mBAAmB,KAAK,QAAQ,yBAAyB,yBAAyB,MAAM,oBAAoB,CAAC;MACxG,IAAI,MAAM,wBAAwB,MAAM,qBAAqB,SAAS,GAC3E,mBAAmB,KAAK;EACtB,IAAI;EACJ,OAAO;EACP,QAAQ,MAAM,qBAAqB;EACnC,YAAY;EACZ,SAAS;CACX,CAAC;CAGH,MAAM,gBAAgB,UAAU,aAAa;CAC7C,MAAM,4BAA4B,mBAAmB,QAAQ,KAAK,UAAU,MAAM,MAAM,QAAQ,CAAC;CAMjG,MAAM,eAAe,MAAM,cAAc,gBAAgB;CACzD,MAAM,qBAAqB,KAAK,IAAI,GAAG,eAAe,gBAAgB,yBAAyB;CAc/F,MAAM,oBAAoB,CACxB,MACE,gBACA,gBAfF,eAAe,IACX,CACE;EACE,IAAI;EACJ,OAAO;EACP,QAAQ;EACR,YAAY;EACZ,SAAS;CACX,CACF,IACA,CAAC,GAOH,8CAA8C,aAAa,0DAC7D,GACA,MACE,gBACA,sBACA,oBACA,sFACF,CACF,CAAC,CAAC,QAAQ,UAAsC,UAAU,KAAA,CAAS;CAEnE,MAAM,oBAAoB,UAAU,iBAAiB;CACrD,MAAM,cAAc,gBAAgB;CAEpC,KAAK,MAAM,SAAS,CAAC,GAAG,eAAe,GAAG,iBAAiB,GACzD,YAAY,MAAM,SAAS,WAAW;CAExC,YAAY,eAAe,WAAW;CACtC,YAAY,mBAAmB,WAAW;CAE1C,OAAO;EACL,SAAS;GACP,QAAQ;GACR,SAAS,cAAc,IAAK,gBAAgB,cAAe,MAAM;GACjE,QAAQ;EACV;EACA,aAAa;GACX,QAAQ;GACR,SAAS,cAAc,IAAK,oBAAoB,cAAe,MAAM;GACrE,QAAQ;EACV;EACA;EACA,WAAW;CACb;AACF"}

package/dist/agents/credential-resolver.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Per-tenant credential resolution seam for deployed (multi-user) servers.
+ *
+ * Locally, model resolution reads the server-global file-backed `AuthStorage`.
+ * A deployed web host registers a {@link CredentialStoreProvider} at boot; from
+ * then on `resolveModel` derives the calling tenant from the request context
+ * (the web auth gate stashes the authenticated user under the `user` key) and
+ * resolves credentials through the tenant's own store — user credentials over
+ * org credentials over server env vars, with OAuth refresh owned by the store.
+ *
+ * When no provider is registered (TUI, local web), everything falls through to
+ * the existing global behavior unchanged.
+ */
+import type { RequestContext } from '@mastra/core/request-context';
+import type { CredentialStore } from '../auth/types.js';
+/** The identity a credential lookup is scoped to. */
+export interface CredentialTenant {
+    /** Org tenant; absent for personal accounts (store impls may synthesize one). */
+    orgId?: string;
+    /** Stable user id from the web auth adapter. */
+    userId: string;
+    /**
+     * Resolve org-shared credentials over the user's personal ones. Set by
+     * trusted server code for automated (factory) runs so they ride the org's
+     * shared keys first and only fall back to the acting user's credentials.
+     */
+    orgFirst?: boolean;
+}
+/**
+ * Returns a tenant-scoped {@link CredentialStore}, or `undefined` to fall back
+ * to the global store (e.g. tenant storage temporarily unavailable). Must be
+ * synchronous — implementations serve from a primed snapshot and do
+ * authoritative async work inside `getApiKey`.
+ */
+export type CredentialStoreProvider = (tenant: CredentialTenant) => CredentialStore | undefined;
+/** Register (or clear) the tenant credential store provider. Deployed-web only. */
+export declare function setCredentialStoreProvider(provider: CredentialStoreProvider | undefined): void;
+/**
+ * Whether a tenant provider is registered. Used to disable the
+ * `loadStoredApiKeysIntoEnv` side-channel in deployed mode — per-tenant
+ * credentials must never leak into process-global env vars.
+ */
+export declare function hasCredentialStoreProvider(): boolean;
+/**
+ * Derive the calling tenant from a request context, if an authenticated web
+ * user was stashed on it. Mirrors the web layer's stable-id resolution
+ * (`workosId` falling back to the provider `id`).
+ *
+ * The value under `user` is whatever the active auth provider's
+ * `authenticateToken` returned, so its shape follows the provider: a flat user
+ * (WorkOS) or a `{ session, user }` wrapper (better-auth). Reading only the
+ * flat shape resolves no tenant at all for the wrapper, which in deployed mode
+ * fails closed to an empty credential store.
+ */
+export declare function resolveTenantFromRequestContext(requestContext?: RequestContext): CredentialTenant | undefined;
+/**
+ * Resolve the credential store for a request. Local mode returns `undefined`
+ * and keeps the global `AuthStorage` behavior. Once deployed web registers a
+ * provider, missing tenant identity or unavailable tenant storage fails closed
+ * through an empty store that also disables process-environment fallback.
+ */
+export declare function resolveCredentialStore(requestContext?: RequestContext): CredentialStore | undefined;
+//# sourceMappingURL=credential-resolver.d.ts.map

package/dist/agents/credential-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-resolver.d.ts","sourceRoot":"","sources":["../../src/agents/credential-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,gBAAgB,KAAK,eAAe,GAAG,SAAS,CAAC;AAkBhG,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAAG,IAAI,CAE9F;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAqCD;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAsB7G;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,SAAS,CAsBnG"}

package/dist/agents/credential-resolver.js

@@ -0,0 +1,97 @@
+//#region src/agents/credential-resolver.ts
+let credentialStoreProvider;
+const unavailableTenantCredentialStore = {
+	allowEnvironmentFallback: false,
+	reload() {},
+	get() {},
+	getStoredApiKey() {},
+	async getApiKey() {}
+};
+/** Register (or clear) the tenant credential store provider. Deployed-web only. */
+function setCredentialStoreProvider(provider) {
+	credentialStoreProvider = provider;
+}
+/**
+* Whether a tenant provider is registered. Used to disable the
+* `loadStoredApiKeysIntoEnv` side-channel in deployed mode — per-tenant
+* credentials must never leak into process-global env vars.
+*/
+function hasCredentialStoreProvider() {
+	return credentialStoreProvider !== void 0;
+}
+/**
+* Whether the request context belongs to a run on a factory-owned session.
+*
+* The agent controller stamps the session's state onto the request context
+* under `controller`, and only trusted factory server code ever writes
+* `factoryProjectId` into session state (board-run creation) — interactive
+* chat sessions never carry it. Runs on such sessions resolve credentials
+* org > user regardless of who sent the message: a board run continued
+* interactively, or a model switch inside it, is still org work.
+*/
+function isFactorySessionContext(requestContext) {
+	const controller = requestContext?.get("controller");
+	if (!controller || typeof controller !== "object") return false;
+	const factoryProjectId = controller.state?.factoryProjectId;
+	return typeof factoryProjectId === "string" && factoryProjectId.length > 0;
+}
+/**
+* Derive the calling tenant from a request context, if an authenticated web
+* user was stashed on it. Mirrors the web layer's stable-id resolution
+* (`workosId` falling back to the provider `id`).
+*
+* The value under `user` is whatever the active auth provider's
+* `authenticateToken` returned, so its shape follows the provider: a flat user
+* (WorkOS) or a `{ session, user }` wrapper (better-auth). Reading only the
+* flat shape resolves no tenant at all for the wrapper, which in deployed mode
+* fails closed to an empty credential store.
+*/
+function resolveTenantFromRequestContext(requestContext) {
+	const raw = requestContext?.get("user");
+	if (!raw || typeof raw !== "object") return void 0;
+	const wrapped = Boolean(raw.user && typeof raw.user === "object" && raw.session && typeof raw.session === "object");
+	const user = wrapped ? raw.user : raw;
+	const orgId = wrapped ? raw.session?.activeOrganizationId : user.organizationId;
+	const userId = user.workosId ?? user.id;
+	if (typeof userId !== "string" || !userId) return void 0;
+	if (orgId !== void 0 && typeof orgId !== "string") return void 0;
+	const orgFirst = raw.orgFirstCredentials === true || user.orgFirstCredentials === true || isFactorySessionContext(requestContext);
+	return {
+		orgId,
+		userId,
+		...orgFirst ? { orgFirst } : {}
+	};
+}
+/**
+* Resolve the credential store for a request. Local mode returns `undefined`
+* and keeps the global `AuthStorage` behavior. Once deployed web registers a
+* provider, missing tenant identity or unavailable tenant storage fails closed
+* through an empty store that also disables process-environment fallback.
+*/
+function resolveCredentialStore(requestContext) {
+	if (!credentialStoreProvider) return void 0;
+	const tenant = resolveTenantFromRequestContext(requestContext);
+	if (!tenant) {
+		const rawUser = requestContext?.get("user");
+		console.warn("[MastraCode] Tenant credential resolution failed closed", {
+			reason: rawUser === void 0 ? "missing-user-context" : "invalid-principal-shape",
+			hasRequestContext: requestContext !== void 0,
+			factorySession: isFactorySessionContext(requestContext)
+		});
+		return unavailableTenantCredentialStore;
+	}
+	const store = credentialStoreProvider(tenant);
+	if (!store) {
+		console.warn("[MastraCode] Tenant credential resolution failed closed", {
+			reason: "credential-store-unavailable",
+			hasOrganization: tenant.orgId !== void 0,
+			orgFirst: tenant.orgFirst === true
+		});
+		return unavailableTenantCredentialStore;
+	}
+	return store;
+}
+//#endregion
+export { hasCredentialStoreProvider, resolveCredentialStore, resolveTenantFromRequestContext, setCredentialStoreProvider };
+
+//# sourceMappingURL=credential-resolver.js.map

package/dist/agents/credential-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-resolver.js","names":[],"sources":["../../src/agents/credential-resolver.ts"],"sourcesContent":["/**\n * Per-tenant credential resolution seam for deployed (multi-user) servers.\n *\n * Locally, model resolution reads the server-global file-backed `AuthStorage`.\n * A deployed web host registers a {@link CredentialStoreProvider} at boot; from\n * then on `resolveModel` derives the calling tenant from the request context\n * (the web auth gate stashes the authenticated user under the `user` key) and\n * resolves credentials through the tenant's own store — user credentials over\n * org credentials over server env vars, with OAuth refresh owned by the store.\n *\n * When no provider is registered (TUI, local web), everything falls through to\n * the existing global behavior unchanged.\n */\n\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { CredentialStore } from '../auth/types.js';\n\n/** The identity a credential lookup is scoped to. */\nexport interface CredentialTenant {\n  /** Org tenant; absent for personal accounts (store impls may synthesize one). */\n  orgId?: string;\n  /** Stable user id from the web auth adapter. */\n  userId: string;\n  /**\n   * Resolve org-shared credentials over the user's personal ones. Set by\n   * trusted server code for automated (factory) runs so they ride the org's\n   * shared keys first and only fall back to the acting user's credentials.\n   */\n  orgFirst?: boolean;\n}\n\n/**\n * Returns a tenant-scoped {@link CredentialStore}, or `undefined` to fall back\n * to the global store (e.g. tenant storage temporarily unavailable). Must be\n * synchronous — implementations serve from a primed snapshot and do\n * authoritative async work inside `getApiKey`.\n */\nexport type CredentialStoreProvider = (tenant: CredentialTenant) => CredentialStore | undefined;\n\nlet credentialStoreProvider: CredentialStoreProvider | undefined;\n\nconst unavailableTenantCredentialStore: CredentialStore = {\n  allowEnvironmentFallback: false,\n  reload() {},\n  get() {\n    return undefined;\n  },\n  getStoredApiKey() {\n    return undefined;\n  },\n  async getApiKey() {\n    return undefined;\n  },\n};\n\n/** Register (or clear) the tenant credential store provider. Deployed-web only. */\nexport function setCredentialStoreProvider(provider: CredentialStoreProvider | undefined): void {\n  credentialStoreProvider = provider;\n}\n\n/**\n * Whether a tenant provider is registered. Used to disable the\n * `loadStoredApiKeysIntoEnv` side-channel in deployed mode — per-tenant\n * credentials must never leak into process-global env vars.\n */\nexport function hasCredentialStoreProvider(): boolean {\n  return credentialStoreProvider !== undefined;\n}\n\n/** Shape the web auth gate stashes on the request context under `user`. */\ninterface RequestContextUser {\n  workosId?: string;\n  id?: string;\n  organizationId?: string;\n  /** Trusted server code marks automated runs to resolve org > user credentials. */\n  orgFirstCredentials?: boolean;\n}\n\n/**\n * Session-shaped `authenticateToken` results (better-auth) arrive as a wrapper\n * whose active org lives on the session half rather than on the user.\n */\ninterface RequestContextSession {\n  user?: RequestContextUser;\n  session?: { activeOrganizationId?: string };\n}\n\n/**\n * Whether the request context belongs to a run on a factory-owned session.\n *\n * The agent controller stamps the session's state onto the request context\n * under `controller`, and only trusted factory server code ever writes\n * `factoryProjectId` into session state (board-run creation) — interactive\n * chat sessions never carry it. Runs on such sessions resolve credentials\n * org > user regardless of who sent the message: a board run continued\n * interactively, or a model switch inside it, is still org work.\n */\nfunction isFactorySessionContext(requestContext?: RequestContext): boolean {\n  const controller = requestContext?.get('controller') as { state?: { factoryProjectId?: unknown } } | undefined;\n  if (!controller || typeof controller !== 'object') return false;\n  const factoryProjectId = controller.state?.factoryProjectId;\n  return typeof factoryProjectId === 'string' && factoryProjectId.length > 0;\n}\n\n/**\n * Derive the calling tenant from a request context, if an authenticated web\n * user was stashed on it. Mirrors the web layer's stable-id resolution\n * (`workosId` falling back to the provider `id`).\n *\n * The value under `user` is whatever the active auth provider's\n * `authenticateToken` returned, so its shape follows the provider: a flat user\n * (WorkOS) or a `{ session, user }` wrapper (better-auth). Reading only the\n * flat shape resolves no tenant at all for the wrapper, which in deployed mode\n * fails closed to an empty credential store.\n */\nexport function resolveTenantFromRequestContext(requestContext?: RequestContext): CredentialTenant | undefined {\n  const raw = requestContext?.get('user') as (RequestContextUser & RequestContextSession) | undefined;\n  if (!raw || typeof raw !== 'object') return undefined;\n\n  // Precedence matches `toFactoryAuthUser` in `@mastra/factory`: a wrapper's org\n  // comes from the session half only, never from the inner user. The two parsers\n  // cannot share code across the package boundary, so they must agree by rule.\n  const wrapped = Boolean(raw.user && typeof raw.user === 'object' && raw.session && typeof raw.session === 'object');\n  const user = wrapped ? (raw.user as RequestContextUser) : raw;\n  const orgId = wrapped ? raw.session?.activeOrganizationId : user.organizationId;\n  const userId = user.workosId ?? user.id;\n  // The slot holds whatever the provider returned, so the declared string\n  // types are hopes, not guarantees. A non-string id must refuse the tenant\n  // (fail closed), not flow onward as a mistyped key.\n  if (typeof userId !== 'string' || !userId) return undefined;\n  if (orgId !== undefined && typeof orgId !== 'string') return undefined;\n  // Only an exact `true` flips precedence — anything else keeps user > org.\n  // Server code stamps the flag on the stashed value itself, so read it from\n  // the top level as well as the unwrapped user (better-auth wrapper shape).\n  const orgFirst =\n    raw.orgFirstCredentials === true || user.orgFirstCredentials === true || isFactorySessionContext(requestContext);\n  return { orgId, userId, ...(orgFirst ? { orgFirst } : {}) };\n}\n\n/**\n * Resolve the credential store for a request. Local mode returns `undefined`\n * and keeps the global `AuthStorage` behavior. Once deployed web registers a\n * provider, missing tenant identity or unavailable tenant storage fails closed\n * through an empty store that also disables process-environment fallback.\n */\nexport function resolveCredentialStore(requestContext?: RequestContext): CredentialStore | undefined {\n  if (!credentialStoreProvider) return undefined;\n  const tenant = resolveTenantFromRequestContext(requestContext);\n  if (!tenant) {\n    const rawUser = requestContext?.get('user');\n    console.warn('[MastraCode] Tenant credential resolution failed closed', {\n      reason: rawUser === undefined ? 'missing-user-context' : 'invalid-principal-shape',\n      hasRequestContext: requestContext !== undefined,\n      factorySession: isFactorySessionContext(requestContext),\n    });\n    return unavailableTenantCredentialStore;\n  }\n  const store = credentialStoreProvider(tenant);\n  if (!store) {\n    console.warn('[MastraCode] Tenant credential resolution failed closed', {\n      reason: 'credential-store-unavailable',\n      hasOrganization: tenant.orgId !== undefined,\n      orgFirst: tenant.orgFirst === true,\n    });\n    return unavailableTenantCredentialStore;\n  }\n  return store;\n}\n"],"mappings":";AAuCA,IAAI;AAEJ,MAAM,mCAAoD;CACxD,0BAA0B;CAC1B,SAAS,CAAC;CACV,MAAM,CAEN;CACA,kBAAkB,CAElB;CACA,MAAM,YAAY,CAElB;AACF;;AAGA,SAAgB,2BAA2B,UAAqD;CAC9F,0BAA0B;AAC5B;;;;;;AAOA,SAAgB,6BAAsC;CACpD,OAAO,4BAA4B,KAAA;AACrC;;;;;;;;;;;AA8BA,SAAS,wBAAwB,gBAA0C;CACzE,MAAM,aAAa,gBAAgB,IAAI,YAAY;CACnD,IAAI,CAAC,cAAc,OAAO,eAAe,UAAU,OAAO;CAC1D,MAAM,mBAAmB,WAAW,OAAO;CAC3C,OAAO,OAAO,qBAAqB,YAAY,iBAAiB,SAAS;AAC3E;;;;;;;;;;;;AAaA,SAAgB,gCAAgC,gBAA+D;CAC7G,MAAM,MAAM,gBAAgB,IAAI,MAAM;CACtC,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU,OAAO,KAAA;CAK5C,MAAM,UAAU,QAAQ,IAAI,QAAQ,OAAO,IAAI,SAAS,YAAY,IAAI,WAAW,OAAO,IAAI,YAAY,QAAQ;CAClH,MAAM,OAAO,UAAW,IAAI,OAA8B;CAC1D,MAAM,QAAQ,UAAU,IAAI,SAAS,uBAAuB,KAAK;CACjE,MAAM,SAAS,KAAK,YAAY,KAAK;CAIrC,IAAI,OAAO,WAAW,YAAY,CAAC,QAAQ,OAAO,KAAA;CAClD,IAAI,UAAU,KAAA,KAAa,OAAO,UAAU,UAAU,OAAO,KAAA;CAI7D,MAAM,WACJ,IAAI,wBAAwB,QAAQ,KAAK,wBAAwB,QAAQ,wBAAwB,cAAc;CACjH,OAAO;EAAE;EAAO;EAAQ,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;CAAG;AAC5D;;;;;;;AAQA,SAAgB,uBAAuB,gBAA8D;CACnG,IAAI,CAAC,yBAAyB,OAAO,KAAA;CACrC,MAAM,SAAS,gCAAgC,cAAc;CAC7D,IAAI,CAAC,QAAQ;EACX,MAAM,UAAU,gBAAgB,IAAI,MAAM;EAC1C,QAAQ,KAAK,2DAA2D;GACtE,QAAQ,YAAY,KAAA,IAAY,yBAAyB;GACzD,mBAAmB,mBAAmB,KAAA;GACtC,gBAAgB,wBAAwB,cAAc;EACxD,CAAC;EACD,OAAO;CACT;CACA,MAAM,QAAQ,wBAAwB,MAAM;CAC5C,IAAI,CAAC,OAAO;EACV,QAAQ,KAAK,2DAA2D;GACtE,QAAQ;GACR,iBAAiB,OAAO,UAAU,KAAA;GAClC,UAAU,OAAO,aAAa;EAChC,CAAC;EACD,OAAO;CACT;CACA,OAAO;AACT"}

package/dist/agents/custom-provider-source.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Custom provider source seam for deployed (multi-user) servers.
+ *
+ * Locally, custom providers are read from the file-backed settings
+ * (settings.json). A deployed web host registers a {@link CustomProvidersSource}
+ * at boot; from then on model resolution and the gateway catalog read custom
+ * providers through the source — DB-backed and tenant-scoped — and never touch
+ * settings.json.
+ *
+ * When no source is registered (TUI, local web), everything falls through to
+ * the existing settings-based behavior unchanged.
+ */
+import type { RequestContext } from '@mastra/core/request-context';
+import type { CredentialTenant } from './credential-resolver.js';
+import type { MastraCodeCustomProvider } from './mastracode-gateway.js';
+/**
+ * Returns the custom providers visible to the given tenant. `tenant` is
+ * `undefined` for calls without an authenticated request (boot-time catalog,
+ * local/no-auth mode) — implementations decide what that means (e.g. the
+ * local sentinel org, or an empty list in tenant mode). Must be synchronous —
+ * implementations serve from a primed snapshot.
+ */
+export type CustomProvidersSource = (tenant: CredentialTenant | undefined) => MastraCodeCustomProvider[];
+/** Register (or clear) the custom providers source. Deployed-web only. */
+export declare function setCustomProvidersSource(source: CustomProvidersSource | undefined): void;
+/** Whether a custom providers source is registered. */
+export declare function hasCustomProvidersSource(): boolean;
+/**
+ * Resolve custom providers for a request. Returns `undefined` when no source
+ * is registered — callers fall back to settings.json. Once a source is
+ * registered it is authoritative: its result (possibly empty) is used and
+ * settings.json is never consulted.
+ */
+export declare function resolveCustomProviders(requestContext?: RequestContext): MastraCodeCustomProvider[] | undefined;
+//# sourceMappingURL=custom-provider-source.d.ts.map

package/dist/agents/custom-provider-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-provider-source.d.ts","sourceRoot":"","sources":["../../src/agents/custom-provider-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,KAAK,wBAAwB,EAAE,CAAC;AAIzG,0EAA0E;AAC1E,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GAAG,IAAI,CAExF;AAED,uDAAuD;AACvD,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,wBAAwB,EAAE,GAAG,SAAS,CAG9G"}

package/dist/agents/custom-provider-source.js

@@ -0,0 +1,25 @@
+import { resolveTenantFromRequestContext } from "./credential-resolver.js";
+//#region src/agents/custom-provider-source.ts
+let customProvidersSource;
+/** Register (or clear) the custom providers source. Deployed-web only. */
+function setCustomProvidersSource(source) {
+	customProvidersSource = source;
+}
+/** Whether a custom providers source is registered. */
+function hasCustomProvidersSource() {
+	return customProvidersSource !== void 0;
+}
+/**
+* Resolve custom providers for a request. Returns `undefined` when no source
+* is registered — callers fall back to settings.json. Once a source is
+* registered it is authoritative: its result (possibly empty) is used and
+* settings.json is never consulted.
+*/
+function resolveCustomProviders(requestContext) {
+	if (!customProvidersSource) return void 0;
+	return customProvidersSource(resolveTenantFromRequestContext(requestContext));
+}
+//#endregion
+export { hasCustomProvidersSource, resolveCustomProviders, setCustomProvidersSource };
+
+//# sourceMappingURL=custom-provider-source.js.map

package/dist/agents/custom-provider-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-provider-source.js","names":[],"sources":["../../src/agents/custom-provider-source.ts"],"sourcesContent":["/**\n * Custom provider source seam for deployed (multi-user) servers.\n *\n * Locally, custom providers are read from the file-backed settings\n * (settings.json). A deployed web host registers a {@link CustomProvidersSource}\n * at boot; from then on model resolution and the gateway catalog read custom\n * providers through the source — DB-backed and tenant-scoped — and never touch\n * settings.json.\n *\n * When no source is registered (TUI, local web), everything falls through to\n * the existing settings-based behavior unchanged.\n */\n\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { CredentialTenant } from './credential-resolver.js';\nimport { resolveTenantFromRequestContext } from './credential-resolver.js';\nimport type { MastraCodeCustomProvider } from './mastracode-gateway.js';\n\n/**\n * Returns the custom providers visible to the given tenant. `tenant` is\n * `undefined` for calls without an authenticated request (boot-time catalog,\n * local/no-auth mode) — implementations decide what that means (e.g. the\n * local sentinel org, or an empty list in tenant mode). Must be synchronous —\n * implementations serve from a primed snapshot.\n */\nexport type CustomProvidersSource = (tenant: CredentialTenant | undefined) => MastraCodeCustomProvider[];\n\nlet customProvidersSource: CustomProvidersSource | undefined;\n\n/** Register (or clear) the custom providers source. Deployed-web only. */\nexport function setCustomProvidersSource(source: CustomProvidersSource | undefined): void {\n  customProvidersSource = source;\n}\n\n/** Whether a custom providers source is registered. */\nexport function hasCustomProvidersSource(): boolean {\n  return customProvidersSource !== undefined;\n}\n\n/**\n * Resolve custom providers for a request. Returns `undefined` when no source\n * is registered — callers fall back to settings.json. Once a source is\n * registered it is authoritative: its result (possibly empty) is used and\n * settings.json is never consulted.\n */\nexport function resolveCustomProviders(requestContext?: RequestContext): MastraCodeCustomProvider[] | undefined {\n  if (!customProvidersSource) return undefined;\n  return customProvidersSource(resolveTenantFromRequestContext(requestContext));\n}\n"],"mappings":";;AA2BA,IAAI;;AAGJ,SAAgB,yBAAyB,QAAiD;CACxF,wBAAwB;AAC1B;;AAGA,SAAgB,2BAAoC;CAClD,OAAO,0BAA0B,KAAA;AACnC;;;;;;;AAQA,SAAgB,uBAAuB,gBAAyE;CAC9G,IAAI,CAAC,uBAAuB,OAAO,KAAA;CACnC,OAAO,sBAAsB,gCAAgC,cAAc,CAAC;AAC9E"}

package/dist/agents/instructions.d.ts

@@ -0,0 +1,29 @@
+import type { MastraCodeState } from '../schema.js';
+import type { PromptSection } from './prompts/index.js';
+export declare function getDynamicInstructions({ requestContext, hostInstructions, hasSubconscious, hasSubagents, }: {
+    requestContext: {
+        get(key: string): unknown;
+    };
+    hostInstructions?: string;
+    hasSubconscious?: boolean | ((state: MastraCodeState | undefined) => boolean);
+    hasSubagents?: boolean;
+}): Promise<string>;
+/**
+ * The system instructions as labeled sections, so callers that attribute
+ * context cost per source (the `/context` audit) measure the same strings that
+ * `getDynamicInstructions` sends rather than reconstructing them.
+ */
+export declare function getDynamicInstructionSections({ requestContext, hostInstructions, hasSubconscious, hasSubagents, }: {
+    requestContext: {
+        get(key: string): unknown;
+    };
+    hostInstructions?: string;
+    /**
+     * The subconscious knowledge tools are registered on the agent. A function
+     * is resolved against the session state, since Factory sessions can refuse
+     * the subconscious per request.
+     */
+    hasSubconscious?: boolean | ((state: MastraCodeState | undefined) => boolean);
+    hasSubagents?: boolean;
+}): Promise<PromptSection[]>;
+//# sourceMappingURL=instructions.d.ts.map

package/dist/agents/instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../../src/agents/instructions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA2B,eAAe,EAAE,MAAM,cAAc,CAAC;AAG7E,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGvE,wBAAsB,sBAAsB,CAAC,EAC3C,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,GACb,EAAE;IACD,cAAc,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC;IAC9E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlB;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,GACb,EAAE;IACD,cAAc,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC;IAC9E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAgD3B"}