@mastra/code-sdk 0.0.0-client-tool-results-20260912062135

package/dist/providers/amazon-bedrock-gateway.d.ts

@@ -0,0 +1,47 @@
+import { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';
+import { MastraModelGateway } from '@mastra/core/llm';
+import type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';
+type BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;
+type BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];
+export declare function supportsBedrockPromptCaching(modelId: string): boolean;
+export declare function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt;
+export declare function withBedrockCache(model: BedrockModel): BedrockModel;
+export declare const AMAZON_BEDROCK_GATEWAY_ID = "amazon-bedrock";
+/**
+ * Whether AWS credentials look available for Bedrock.
+ *
+ * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so
+ * this only governs whether Bedrock models are offered as "authenticated" in the
+ * picker. We look for the common signals (env vars, bearer token, a configured
+ * profile, or a shared credentials/config file) rather than resolving
+ * credentials here, since the auth checker must stay sync.
+ */
+export declare function hasAwsCredentials(): boolean;
+/**
+ * Standalone Amazon Bedrock gateway.
+ *
+ * Bedrock is resolved directly via AWS SigV4 (not through the model router) and
+ * its models are surfaced from the public models.dev catalog. It is exposed as
+ * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the
+ * MastraCode gateway namespace.
+ */
+export declare class AmazonBedrockGateway extends MastraModelGateway {
+    readonly id = "amazon-bedrock";
+    readonly name = "Amazon Bedrock";
+    shouldEnable(): boolean;
+    fetchProviders(): Promise<Record<string, ProviderConfig>>;
+    buildUrl(_modelId: string): string | undefined;
+    getApiKey(_modelId: string): Promise<string>;
+    resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined;
+    resolveLanguageModel(args: {
+        modelId: string;
+        providerId: string;
+        apiKey: string;
+        headers?: Record<string, string>;
+        transport?: any;
+        responsesWebSocket?: any;
+    }): GatewayLanguageModel;
+}
+export declare function createAmazonBedrockGateway(): AmazonBedrockGateway;
+export {};
+//# sourceMappingURL=amazon-bedrock-gateway.d.ts.map

package/dist/providers/amazon-bedrock-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock-gateway.d.ts","sourceRoot":"","sources":["../../src/providers/amazon-bedrock-gateway.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIpH,KAAK,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AACvE,KAAK,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAczE,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAErE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAsC1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAclE;AAED,eAAO,MAAM,yBAAyB,mBAAmB,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAuB3C;AA0BD;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,kBAAkB;IAC1D,QAAQ,CAAC,EAAE,oBAA6B;IACxC,QAAQ,CAAC,IAAI,oBAAoB;IAEjC,YAAY,IAAI,OAAO;IAIjB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAiB/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAUxE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CAGzB;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CAEjE"}

package/dist/providers/amazon-bedrock-gateway.js

@@ -0,0 +1,153 @@
+import { getBedrockModelCatalog } from "./amazon-bedrock.js";
+import { existsSync } from "fs";
+import path from "path";
+import { MastraModelGateway } from "@mastra/core/llm";
+import { createAmazonBedrock } from "@ai-sdk/amazon-bedrock";
+import { fromNodeProviderChain } from "@aws-sdk/credential-providers";
+//#region src/providers/amazon-bedrock-gateway.ts
+const CACHEABLE_BEDROCK_MODEL_IDS = [
+	"anthropic.claude-3-5-haiku-",
+	"anthropic.claude-3-5-sonnet-20241022-v2:0",
+	"anthropic.claude-3-7-sonnet-",
+	"anthropic.claude-fable-5",
+	"anthropic.claude-haiku-4-5-",
+	"anthropic.claude-opus-4-",
+	"anthropic.claude-opus-5",
+	"anthropic.claude-sonnet-4-",
+	"anthropic.claude-sonnet-5"
+];
+function supportsBedrockPromptCaching(modelId) {
+	return CACHEABLE_BEDROCK_MODEL_IDS.some((cacheableModelId) => modelId.includes(cacheableModelId));
+}
+function addBedrockCachePoints(prompt) {
+	const result = [...prompt];
+	const markCachePoint = (message) => ({
+		...message,
+		providerOptions: {
+			...message.providerOptions,
+			bedrock: {
+				...message.providerOptions?.bedrock,
+				cachePoint: { type: "default" }
+			}
+		}
+	});
+	let lastSystemIndex = -1;
+	for (let index = result.length - 1; index >= 0; index--) if (result[index].role === "system") {
+		lastSystemIndex = index;
+		break;
+	}
+	if (lastSystemIndex >= 0) result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]);
+	let lastNonSystemIndex = -1;
+	for (let index = result.length - 1; index >= 0; index--) if (result[index].role !== "system") {
+		lastNonSystemIndex = index;
+		break;
+	}
+	if (lastNonSystemIndex >= 0) result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]);
+	return result;
+}
+function withBedrockCache(model) {
+	return new Proxy(model, { get(target, property, receiver) {
+		if (property === "doGenerate") return (options) => target.doGenerate({
+			...options,
+			prompt: addBedrockCachePoints(options.prompt)
+		});
+		if (property === "doStream") return (options) => target.doStream({
+			...options,
+			prompt: addBedrockCachePoints(options.prompt)
+		});
+		return Reflect.get(target, property, receiver);
+	} });
+}
+const AMAZON_BEDROCK_GATEWAY_ID = "amazon-bedrock";
+/**
+* Whether AWS credentials look available for Bedrock.
+*
+* Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so
+* this only governs whether Bedrock models are offered as "authenticated" in the
+* picker. We look for the common signals (env vars, bearer token, a configured
+* profile, or a shared credentials/config file) rather than resolving
+* credentials here, since the auth checker must stay sync.
+*/
+function hasAwsCredentials() {
+	if (process.env.AWS_BEARER_TOKEN_BEDROCK || process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY || process.env.AWS_SHARED_CREDENTIALS_FILE || process.env.AWS_CONFIG_FILE || process.env.AWS_PROFILE || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI || process.env.AWS_WEB_IDENTITY_TOKEN_FILE) return true;
+	const home = process.env.HOME || process.env.USERPROFILE;
+	if (home) {
+		const awsDir = path.join(home, ".aws");
+		const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, "credentials");
+		const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, "config");
+		if (existsSync(credentialsPath) || existsSync(configPath)) return true;
+	}
+	return false;
+}
+/**
+* Create an Amazon Bedrock model.
+*
+* Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this
+* resolves credentials through the standard AWS provider chain
+* (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and
+* SSO profiles, and container/instance roles — the same resolution order the AWS
+* CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.
+*
+* When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer
+* auth instead and ignores the credential provider, so we leave that path to the
+* SDK and only wire up SigV4 here.
+*/
+function bedrockProvider(modelId, headers) {
+	const model = createAmazonBedrock({
+		region: process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || "us-east-1",
+		credentialProvider: fromNodeProviderChain(),
+		headers
+	})(modelId);
+	return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;
+}
+/**
+* Standalone Amazon Bedrock gateway.
+*
+* Bedrock is resolved directly via AWS SigV4 (not through the model router) and
+* its models are surfaced from the public models.dev catalog. It is exposed as
+* its own gateway/provider (`amazon-bedrock/...`) rather than nested under the
+* MastraCode gateway namespace.
+*/
+var AmazonBedrockGateway = class extends MastraModelGateway {
+	id = AMAZON_BEDROCK_GATEWAY_ID;
+	name = "Amazon Bedrock";
+	shouldEnable() {
+		return hasAwsCredentials();
+	}
+	async fetchProviders() {
+		const providers = {};
+		try {
+			const bedrockModels = await getBedrockModelCatalog();
+			providers["amazon-bedrock"] = {
+				name: "Amazon Bedrock",
+				apiKeyEnvVar: "",
+				apiKeyHeader: "Authorization",
+				gateway: this.id,
+				models: bedrockModels.map((model) => model.id)
+			};
+		} catch (error) {
+			console.warn("Failed to load Amazon Bedrock model catalog:", error);
+		}
+		return providers;
+	}
+	buildUrl(_modelId) {}
+	async getApiKey(_modelId) {
+		return hasAwsCredentials() ? "aws-credential-chain" : "";
+	}
+	resolveAuth(_request) {
+		if (hasAwsCredentials()) return {
+			apiKey: "aws-credential-chain",
+			source: "gateway"
+		};
+	}
+	resolveLanguageModel(args) {
+		return bedrockProvider(args.modelId, args.headers);
+	}
+};
+function createAmazonBedrockGateway() {
+	return new AmazonBedrockGateway();
+}
+//#endregion
+export { AMAZON_BEDROCK_GATEWAY_ID, AmazonBedrockGateway, addBedrockCachePoints, createAmazonBedrockGateway, hasAwsCredentials, supportsBedrockPromptCaching, withBedrockCache };
+
+//# sourceMappingURL=amazon-bedrock-gateway.js.map

package/dist/providers/amazon-bedrock-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock-gateway.js","names":[],"sources":["../../src/providers/amazon-bedrock-gateway.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\nimport { fromNodeProviderChain } from '@aws-sdk/credential-providers';\nimport { MastraModelGateway } from '@mastra/core/llm';\nimport type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';\nimport { getBedrockModelCatalog } from './amazon-bedrock.js';\n\ntype ModelRequestHeaders = Record<string, string>;\ntype BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;\ntype BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];\n\nconst CACHEABLE_BEDROCK_MODEL_IDS = [\n  'anthropic.claude-3-5-haiku-',\n  'anthropic.claude-3-5-sonnet-20241022-v2:0',\n  'anthropic.claude-3-7-sonnet-',\n  'anthropic.claude-fable-5',\n  'anthropic.claude-haiku-4-5-',\n  'anthropic.claude-opus-4-',\n  'anthropic.claude-opus-5',\n  'anthropic.claude-sonnet-4-',\n  'anthropic.claude-sonnet-5',\n];\n\nexport function supportsBedrockPromptCaching(modelId: string): boolean {\n  return CACHEABLE_BEDROCK_MODEL_IDS.some(cacheableModelId => modelId.includes(cacheableModelId));\n}\n\nexport function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt {\n  const result = [...prompt];\n  const markCachePoint = (message: (typeof result)[number]) => ({\n    ...message,\n    providerOptions: {\n      ...message.providerOptions,\n      bedrock: {\n        ...message.providerOptions?.bedrock,\n        cachePoint: { type: 'default' },\n      },\n    },\n  });\n\n  let lastSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role === 'system') {\n      lastSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastSystemIndex >= 0) {\n    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]!);\n  }\n\n  let lastNonSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role !== 'system') {\n      lastNonSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastNonSystemIndex >= 0) {\n    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]!);\n  }\n\n  return result;\n}\n\nexport function withBedrockCache(model: BedrockModel): BedrockModel {\n  return new Proxy(model, {\n    get(target, property, receiver) {\n      if (property === 'doGenerate') {\n        return (options: Parameters<BedrockModel['doGenerate']>[0]) =>\n          target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      if (property === 'doStream') {\n        return (options: Parameters<BedrockModel['doStream']>[0]) =>\n          target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n\nexport const AMAZON_BEDROCK_GATEWAY_ID = 'amazon-bedrock';\n\n/**\n * Whether AWS credentials look available for Bedrock.\n *\n * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so\n * this only governs whether Bedrock models are offered as \"authenticated\" in the\n * picker. We look for the common signals (env vars, bearer token, a configured\n * profile, or a shared credentials/config file) rather than resolving\n * credentials here, since the auth checker must stay sync.\n */\nexport function hasAwsCredentials(): boolean {\n  if (\n    process.env.AWS_BEARER_TOKEN_BEDROCK ||\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    process.env.AWS_SHARED_CREDENTIALS_FILE ||\n    process.env.AWS_CONFIG_FILE ||\n    process.env.AWS_PROFILE ||\n    process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ||\n    process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI ||\n    process.env.AWS_WEB_IDENTITY_TOKEN_FILE\n  ) {\n    return true;\n  }\n  const home = process.env.HOME || process.env.USERPROFILE;\n  if (home) {\n    const awsDir = path.join(home, '.aws');\n    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, 'credentials');\n    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, 'config');\n    if (existsSync(credentialsPath) || existsSync(configPath)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Create an Amazon Bedrock model.\n *\n * Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this\n * resolves credentials through the standard AWS provider chain\n * (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and\n * SSO profiles, and container/instance roles — the same resolution order the AWS\n * CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.\n *\n * When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer\n * auth instead and ignores the credential provider, so we leave that path to the\n * SDK and only wire up SigV4 here.\n */\nfunction bedrockProvider(modelId: string, headers?: ModelRequestHeaders) {\n  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1';\n  const bedrock = createAmazonBedrock({\n    region,\n    credentialProvider: fromNodeProviderChain(),\n    headers,\n  });\n  const model = bedrock(modelId);\n  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;\n}\n\n/**\n * Standalone Amazon Bedrock gateway.\n *\n * Bedrock is resolved directly via AWS SigV4 (not through the model router) and\n * its models are surfaced from the public models.dev catalog. It is exposed as\n * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the\n * MastraCode gateway namespace.\n */\nexport class AmazonBedrockGateway extends MastraModelGateway {\n  readonly id = AMAZON_BEDROCK_GATEWAY_ID;\n  readonly name = 'Amazon Bedrock';\n\n  shouldEnable(): boolean {\n    return hasAwsCredentials();\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    try {\n      const bedrockModels = await getBedrockModelCatalog();\n      providers['amazon-bedrock'] = {\n        name: 'Amazon Bedrock',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: bedrockModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load Amazon Bedrock model catalog:', error);\n    }\n    return providers;\n  }\n\n  buildUrl(_modelId: string): string | undefined {\n    return undefined;\n  }\n\n  async getApiKey(_modelId: string): Promise<string> {\n    return hasAwsCredentials() ? 'aws-credential-chain' : '';\n  }\n\n  resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    // Amazon Bedrock authenticates via the AWS credential chain rather than a\n    // stored API key, so report it as authenticated whenever AWS credentials look\n    // available. The actual SigV4 signing happens inside `bedrockProvider()`.\n    if (hasAwsCredentials()) {\n      return { apiKey: 'aws-credential-chain', source: 'gateway' };\n    }\n    return undefined;\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    return bedrockProvider(args.modelId, args.headers) as unknown as GatewayLanguageModel;\n  }\n}\n\nexport function createAmazonBedrockGateway(): AmazonBedrockGateway {\n  return new AmazonBedrockGateway();\n}\n"],"mappings":";;;;;;;AAYA,MAAM,8BAA8B;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,6BAA6B,SAA0B;CACrE,OAAO,4BAA4B,MAAK,qBAAoB,QAAQ,SAAS,gBAAgB,CAAC;AAChG;AAEA,SAAgB,sBAAsB,QAAsC;CAC1E,MAAM,SAAS,CAAC,GAAG,MAAM;CACzB,MAAM,kBAAkB,aAAsC;EAC5D,GAAG;EACH,iBAAiB;GACf,GAAG,QAAQ;GACX,SAAS;IACP,GAAG,QAAQ,iBAAiB;IAC5B,YAAY,EAAE,MAAM,UAAU;GAChC;EACF;CACF;CAEA,IAAI,kBAAkB;CACtB,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAC9C,IAAI,OAAO,MAAM,CAAE,SAAS,UAAU;EACpC,kBAAkB;EAClB;CACF;CAGF,IAAI,mBAAmB,GACrB,OAAO,mBAAmB,eAAe,OAAO,gBAAiB;CAGnE,IAAI,qBAAqB;CACzB,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAC9C,IAAI,OAAO,MAAM,CAAE,SAAS,UAAU;EACpC,qBAAqB;EACrB;CACF;CAGF,IAAI,sBAAsB,GACxB,OAAO,sBAAsB,eAAe,OAAO,mBAAoB;CAGzE,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAmC;CAClE,OAAO,IAAI,MAAM,OAAO,EACtB,IAAI,QAAQ,UAAU,UAAU;EAC9B,IAAI,aAAa,cACf,QAAQ,YACN,OAAO,WAAW;GAAE,GAAG;GAAS,QAAQ,sBAAsB,QAAQ,MAAM;EAAE,CAAC;EAEnF,IAAI,aAAa,YACf,QAAQ,YACN,OAAO,SAAS;GAAE,GAAG;GAAS,QAAQ,sBAAsB,QAAQ,MAAM;EAAE,CAAC;EAEjF,OAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;CAC/C,EACF,CAAC;AACH;AAEA,MAAa,4BAA4B;;;;;;;;;;AAWzC,SAAgB,oBAA6B;CAC3C,IACE,QAAQ,IAAI,4BACX,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,IAAI,+BACZ,QAAQ,IAAI,mBACZ,QAAQ,IAAI,eACZ,QAAQ,IAAI,0CACZ,QAAQ,IAAI,sCACZ,QAAQ,IAAI,6BAEZ,OAAO;CAET,MAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI;CAC7C,IAAI,MAAM;EACR,MAAM,SAAS,KAAK,KAAK,MAAM,MAAM;EACrC,MAAM,kBAAkB,QAAQ,IAAI,+BAA+B,KAAK,KAAK,QAAQ,aAAa;EAClG,MAAM,aAAa,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,QAAQ;EAC5E,IAAI,WAAW,eAAe,KAAK,WAAW,UAAU,GACtD,OAAO;CAEX;CACA,OAAO;AACT;;;;;;;;;;;;;;AAeA,SAAS,gBAAgB,SAAiB,SAA+B;CAOvE,MAAM,QALU,oBAAoB;EAClC,QAFa,QAAQ,IAAI,cAAc,QAAQ,IAAI,sBAAsB;EAGzE,oBAAoB,sBAAsB;EAC1C;CACF,CACoB,CAAC,CAAC,OAAO;CAC7B,OAAO,6BAA6B,OAAO,IAAI,iBAAiB,KAAK,IAAI;AAC3E;;;;;;;;;AAUA,IAAa,uBAAb,cAA0C,mBAAmB;CAC3D,KAAc;CACd,OAAgB;CAEhB,eAAwB;EACtB,OAAO,kBAAkB;CAC3B;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB;GACnD,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EACA,OAAO;CACT;CAEA,SAAS,UAAsC,CAE/C;CAEA,MAAM,UAAU,UAAmC;EACjD,OAAO,kBAAkB,IAAI,yBAAyB;CACxD;CAEA,YAAY,UAA6D;EAIvE,IAAI,kBAAkB,GACpB,OAAO;GAAE,QAAQ;GAAwB,QAAQ;EAAU;CAG/D;CAEA,qBAAqB,MAOI;EACvB,OAAO,gBAAgB,KAAK,SAAS,KAAK,OAAO;CACnD;AACF;AAEA,SAAgB,6BAAmD;CACjE,OAAO,IAAI,qBAAqB;AAClC"}

package/dist/providers/amazon-bedrock.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Amazon Bedrock model catalog.
+ *
+ * Bedrock is not part of mastracode's gateway-synced model router (it
+ * authenticates with AWS SigV4 rather than an API key / base URL, so it is
+ * resolved directly in `agents/model.ts`). To still offer Bedrock models in the
+ * `/models` picker and packs, we fetch the public models.dev catalog — the same
+ * source the model router uses — and expose the `amazon-bedrock` provider's
+ * model list. This mirrors the GitHub Copilot catalog approach.
+ */
+export interface BedrockModelEntry {
+    id: string;
+}
+/** Reset the in-process Bedrock catalog cache (test seam). */
+export declare function clearBedrockCatalogCache(): void;
+/**
+ * Return the available Amazon Bedrock models.
+ *
+ * - Returns the cached list when a recent fetch succeeded.
+ * - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and
+ *   caches it for an hour.
+ * - On fetch failure, returns a small hard-coded fallback (so packs still work
+ *   offline) and caches that briefly to avoid hammering the network.
+ *
+ * Concurrent calls during a fetch share the inflight promise.
+ */
+export declare function getBedrockModelCatalog(): Promise<BedrockModelEntry[]>;
+//# sourceMappingURL=amazon-bedrock.d.ts.map

package/dist/providers/amazon-bedrock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock.d.ts","sourceRoot":"","sources":["../../src/providers/amazon-bedrock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAyDD,8DAA8D;AAC9D,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAiBD;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAiC3E"}

package/dist/providers/amazon-bedrock.js

@@ -0,0 +1,102 @@
+//#region src/providers/amazon-bedrock.ts
+/**
+* Amazon Bedrock model catalog.
+*
+* Bedrock is not part of mastracode's gateway-synced model router (it
+* authenticates with AWS SigV4 rather than an API key / base URL, so it is
+* resolved directly in `agents/model.ts`). To still offer Bedrock models in the
+* `/models` picker and packs, we fetch the public models.dev catalog — the same
+* source the model router uses — and expose the `amazon-bedrock` provider's
+* model list. This mirrors the GitHub Copilot catalog approach.
+*/
+const MODELS_DEV_API_URL = "https://models.dev/api.json";
+const BEDROCK_PROVIDER_ID = "amazon-bedrock";
+const CATALOG_TTL_MS = 3600 * 1e3;
+const CATALOG_FAILURE_TTL_MS = 60 * 1e3;
+const CATALOG_FETCH_TIMEOUT_MS = 5e3;
+/**
+* True when the catalog entry asks for a transport this catalog cannot serve.
+*
+* Every id returned here is handed to `createAmazonBedrock()(modelId)` by
+* `amazon-bedrock-gateway.ts`, i.e. the Converse API, unconditionally. A
+* `provider` override in the catalog means the model wants a different endpoint
+* and API shape: the nine `bedrock-mantle` models point at
+* `https://bedrock-mantle.${AWS_REGION}.api.aws/openai/v1` with
+* `shape: "responses"`. Advertising them makes them selectable in `/models` and
+* in packs even though the request that follows cannot reach them.
+*
+* Filtering is deliberately conservative: it hides what is currently unusable
+* rather than guessing at a transport. Routing these to Mantle properly is a
+* separate change and a design call for the maintainers.
+*/
+function needsUnsupportedTransport(entry) {
+	const provider = entry?.provider;
+	return Boolean(provider && (provider.npm || provider.api || provider.shape));
+}
+/**
+* A small, stable fallback so Bedrock packs keep working offline or when
+* models.dev is unreachable. Intentionally minimal — the live catalog is the
+* source of truth and supersedes this within one fetch.
+*/
+const BEDROCK_FALLBACK_MODELS = [
+	{ id: "us.anthropic.claude-opus-4-6-v1" },
+	{ id: "us.anthropic.claude-sonnet-4-5-20250929-v1:0" },
+	{ id: "us.anthropic.claude-haiku-4-5-20251001-v1:0" }
+];
+let catalogCache = null;
+let inflightFetch = null;
+/** Reset the in-process Bedrock catalog cache (test seam). */
+function clearBedrockCatalogCache() {
+	catalogCache = null;
+	inflightFetch = null;
+}
+async function fetchBedrockModels(signal) {
+	const response = await fetch(MODELS_DEV_API_URL, { signal });
+	if (!response.ok) throw new Error(`models.dev returned ${response.status}`);
+	const models = (await response.json())[BEDROCK_PROVIDER_ID]?.models ?? {};
+	return Object.entries(models).filter(([, entry]) => !needsUnsupportedTransport(entry)).map(([id]) => id).sort().map((id) => ({ id }));
+}
+/**
+* Return the available Amazon Bedrock models.
+*
+* - Returns the cached list when a recent fetch succeeded.
+* - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and
+*   caches it for an hour.
+* - On fetch failure, returns a small hard-coded fallback (so packs still work
+*   offline) and caches that briefly to avoid hammering the network.
+*
+* Concurrent calls during a fetch share the inflight promise.
+*/
+async function getBedrockModelCatalog() {
+	if (catalogCache && Date.now() - catalogCache.fetchedAt < catalogCache.ttl) return catalogCache.models;
+	if (inflightFetch) return inflightFetch;
+	inflightFetch = (async () => {
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);
+		try {
+			const models = await fetchBedrockModels(controller.signal);
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_TTL_MS,
+				models
+			};
+			return models;
+		} catch (error) {
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_FAILURE_TTL_MS,
+				models: BEDROCK_FALLBACK_MODELS
+			};
+			console.warn("Failed to fetch live Amazon Bedrock models, using fallback list:", error instanceof Error ? error.message : error);
+			return BEDROCK_FALLBACK_MODELS;
+		} finally {
+			clearTimeout(timer);
+			inflightFetch = null;
+		}
+	})();
+	return inflightFetch;
+}
+//#endregion
+export { clearBedrockCatalogCache, getBedrockModelCatalog };
+
+//# sourceMappingURL=amazon-bedrock.js.map

package/dist/providers/amazon-bedrock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock.js","names":[],"sources":["../../src/providers/amazon-bedrock.ts"],"sourcesContent":["/**\n * Amazon Bedrock model catalog.\n *\n * Bedrock is not part of mastracode's gateway-synced model router (it\n * authenticates with AWS SigV4 rather than an API key / base URL, so it is\n * resolved directly in `agents/model.ts`). To still offer Bedrock models in the\n * `/models` picker and packs, we fetch the public models.dev catalog — the same\n * source the model router uses — and expose the `amazon-bedrock` provider's\n * model list. This mirrors the GitHub Copilot catalog approach.\n */\n\nconst MODELS_DEV_API_URL = 'https://models.dev/api.json';\nconst BEDROCK_PROVIDER_ID = 'amazon-bedrock';\n\nconst CATALOG_TTL_MS = 60 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\nexport interface BedrockModelEntry {\n  id: string;\n}\n\n/**\n * A models.dev catalog entry for one Bedrock model.\n *\n * Most entries carry no `provider` block: they are served by the SigV4\n * `bedrock-runtime` Converse API, which is what this catalog feeds. An entry\n * that *does* carry one is overriding that transport.\n */\ninterface BedrockCatalogEntry {\n  provider?: {\n    npm?: string;\n    api?: string;\n    shape?: string;\n  };\n}\n\n/**\n * True when the catalog entry asks for a transport this catalog cannot serve.\n *\n * Every id returned here is handed to `createAmazonBedrock()(modelId)` by\n * `amazon-bedrock-gateway.ts`, i.e. the Converse API, unconditionally. A\n * `provider` override in the catalog means the model wants a different endpoint\n * and API shape: the nine `bedrock-mantle` models point at\n * `https://bedrock-mantle.${AWS_REGION}.api.aws/openai/v1` with\n * `shape: \"responses\"`. Advertising them makes them selectable in `/models` and\n * in packs even though the request that follows cannot reach them.\n *\n * Filtering is deliberately conservative: it hides what is currently unusable\n * rather than guessing at a transport. Routing these to Mantle properly is a\n * separate change and a design call for the maintainers.\n */\nfunction needsUnsupportedTransport(entry: unknown): boolean {\n  const provider = (entry as BedrockCatalogEntry | null)?.provider;\n  return Boolean(provider && (provider.npm || provider.api || provider.shape));\n}\n\n/**\n * A small, stable fallback so Bedrock packs keep working offline or when\n * models.dev is unreachable. Intentionally minimal — the live catalog is the\n * source of truth and supersedes this within one fetch.\n */\nconst BEDROCK_FALLBACK_MODELS: BedrockModelEntry[] = [\n  { id: 'us.anthropic.claude-opus-4-6-v1' },\n  { id: 'us.anthropic.claude-sonnet-4-5-20250929-v1:0' },\n  { id: 'us.anthropic.claude-haiku-4-5-20251001-v1:0' },\n];\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: BedrockModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<BedrockModelEntry[]> | null = null;\n\n/** Reset the in-process Bedrock catalog cache (test seam). */\nexport function clearBedrockCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\nasync function fetchBedrockModels(signal: AbortSignal): Promise<BedrockModelEntry[]> {\n  const response = await fetch(MODELS_DEV_API_URL, { signal });\n  if (!response.ok) {\n    throw new Error(`models.dev returned ${response.status}`);\n  }\n  const data = (await response.json()) as Record<string, { models?: Record<string, unknown> }>;\n  const provider = data[BEDROCK_PROVIDER_ID];\n  const models = provider?.models ?? {};\n  return Object.entries(models)\n    .filter(([, entry]) => !needsUnsupportedTransport(entry))\n    .map(([id]) => id)\n    .sort()\n    .map(id => ({ id }));\n}\n\n/**\n * Return the available Amazon Bedrock models.\n *\n * - Returns the cached list when a recent fetch succeeded.\n * - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and\n *   caches it for an hour.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that briefly to avoid hammering the network.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getBedrockModelCatalog(): Promise<BedrockModelEntry[]> {\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<BedrockModelEntry[]> => {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n    try {\n      const models = await fetchBedrockModels(controller.signal);\n      catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n      return models;\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: BEDROCK_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live Amazon Bedrock models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return BEDROCK_FALLBACK_MODELS;\n    } finally {\n      clearTimeout(timer);\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,iBAAiB,OAAU;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;;;;;;;;;;;;;;;;AAoCjC,SAAS,0BAA0B,OAAyB;CAC1D,MAAM,WAAY,OAAsC;CACxD,OAAO,QAAQ,aAAa,SAAS,OAAO,SAAS,OAAO,SAAS,MAAM;AAC7E;;;;;;AAOA,MAAM,0BAA+C;CACnD,EAAE,IAAI,kCAAkC;CACxC,EAAE,IAAI,+CAA+C;CACrD,EAAE,IAAI,8CAA8C;AACtD;AAQA,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;;AAGzD,SAAgB,2BAAiC;CAC/C,eAAe;CACf,gBAAgB;AAClB;AAEA,eAAe,mBAAmB,QAAmD;CACnF,MAAM,WAAW,MAAM,MAAM,oBAAoB,EAAE,OAAO,CAAC;CAC3D,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,uBAAuB,SAAS,QAAQ;CAI1D,MAAM,UADW,MADG,SAAS,KAAK,EAAA,CACZ,oBACC,EAAE,UAAU,CAAC;CACpC,OAAO,OAAO,QAAQ,MAAM,CAAC,CAC1B,QAAQ,GAAG,WAAW,CAAC,0BAA0B,KAAK,CAAC,CAAC,CACxD,KAAK,CAAC,QAAQ,EAAE,CAAC,CACjB,KAAK,CAAC,CACN,KAAI,QAAO,EAAE,GAAG,EAAE;AACvB;;;;;;;;;;;;AAaA,eAAsB,yBAAuD;CAE3E,IAAI,gBADQ,KAAK,IACK,IAAI,aAAa,YAAY,aAAa,KAC9D,OAAO,aAAa;CAGtB,IAAI,eAAe,OAAO;CAE1B,iBAAiB,YAA0C;EACzD,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,wBAAwB;EAC3E,IAAI;GACF,MAAM,SAAS,MAAM,mBAAmB,WAAW,MAAM;GACzD,eAAe;IAAE,WAAW,KAAK,IAAI;IAAG,KAAK;IAAgB;GAAO;GACpE,OAAO;EACT,SAAS,OAAO;GACd,eAAe;IACb,WAAW,KAAK,IAAI;IACpB,KAAK;IACL,QAAQ;GACV;GACA,QAAQ,KACN,oEACA,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;GACA,OAAO;EACT,UAAU;GACR,aAAa,KAAK;GAClB,gBAAgB;EAClB;CACF,EAAA,CAAG;CAEH,OAAO;AACT"}

package/dist/providers/claude-max.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Claude Max OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.
+ * The OAuth endpoint requires a specific system message to be present.
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import type { LanguageModelMiddleware } from 'ai';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+import type { ThinkingLevel } from './openai-codex.js';
+/**
+ * Get or create the shared AuthStorage instance
+ */
+export declare function getAuthStorage(): AuthStorage;
+/**
+ * Set a custom AuthStorage instance (useful for TUI integration)
+ */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/**
+ * Middleware that injects the Claude Code identity system message
+ * Required for Claude Max OAuth authentication
+ */
+export declare const claudeCodeMiddleware: LanguageModelMiddleware;
+/**
+ * Prompt caching middleware for Anthropic
+ *
+ * Adds cache breakpoints at strategic locations:
+ * 1. Last system message (end of static instructions + dynamic memory)
+ * 2. Most recent user/assistant message (conversation context)
+ *
+ * This allows Anthropic to cache:
+ * - System prompts and instructions (rarely change)
+ * - Conversation history up to the last message
+ */
+export declare const promptCacheMiddleware: LanguageModelMiddleware;
+/**
+ * Middleware that maps the session thinking level onto Anthropic extended
+ * thinking. Returns `undefined` (no middleware) when the level is `off` or the
+ * model doesn't support thinking, preserving the previous request shape.
+ *
+ * - Adaptive-era models (Sonnet 4.6+/Opus 4.6+): `thinking: adaptive` plus
+ *   `output_config.effort` mapped 1:1 from the level (including `max`).
+ * - Budget-era models (Claude 3.7 – Opus 4.5): `thinking: enabled` with a
+ *   `budget_tokens` value derived from the level.
+ */
+export declare function createAnthropicThinkingMiddleware(modelId: string, thinkingLevel?: ThinkingLevel): LanguageModelMiddleware | undefined;
+/**
+ * Build a fetch function that handles Anthropic OAuth.
+ * Preserves non-auth headers from init (critical for gateway auth header to survive
+ * when used with the gateway). Strips `authorization` and `x-api-key`.
+ */
+export declare function buildAnthropicOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+}): typeof fetch;
+/**
+ * Creates an Anthropic model using Claude Max OAuth authentication
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+ */
+export declare function opencodeClaudeMaxProvider(modelId?: string, options?: {
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+    thinkingLevel?: ThinkingLevel;
+}): MastraModelConfig;
+//# sourceMappingURL=claude-max.d.ts.map

package/dist/providers/claude-max.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-max.d.ts","sourceRoot":"","sources":["../../src/providers/claude-max.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAoBvD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,uBAkBlC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,uBA2DnC,CAAC;AA+CF;;;;;;;;;GASG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAC5B,uBAAuB,GAAG,SAAS,CAiCrC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAmDnG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,MAAmC,EAC5C,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,aAAa,CAAC,EAAE,aAAa,CAAA;CAAE,GAC3G,iBAAiB,CA4BnB"}