@mastra/code-sdk 0.0.0-client-tool-results-20260912062135

package/dist/providers/kimi-coding.d.ts

@@ -0,0 +1,15 @@
+import type { MastraModelConfig } from '@mastra/core/llm';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+export declare const KIMI_CODING_MODELS: readonly ["k3", "k3-256k", "kimi-for-coding", "kimi-for-coding-highspeed"];
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+export declare function buildKimiCodingOAuthFetch(options?: {
+    credentialStore?: CredentialStore;
+}): typeof fetch;
+export declare function buildKimiCodingApiKeyFetch(apiKey: string): typeof fetch;
+export declare function kimiCodingProvider(modelId: string, options: {
+    apiKey: string;
+    headers?: Record<string, string>;
+    credentialStore?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=kimi-coding.d.ts.map

package/dist/providers/kimi-coding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi-coding.d.ts","sourceRoot":"","sources":["../../src/providers/kimi-coding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOxD,eAAO,MAAM,kBAAkB,4EAA6E,CAAC;AAI7G,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,wBAAgB,yBAAyB,CAAC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAuB3G;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,KAAK,CASvE;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAA;CAAE,GAC/F,iBAAiB,CAWnB"}

package/dist/providers/kimi-coding.js

@@ -0,0 +1,69 @@
+import { getKimiCodingDeviceHeaders, isKimiCodingDeviceId } from "../auth/providers/kimi-coding.js";
+import { AuthStorage } from "../auth/storage.js";
+import { ProviderAuthRequiredError } from "../auth/provider-auth-error.js";
+import { createAnthropic } from "@ai-sdk/anthropic";
+//#region src/providers/kimi-coding.ts
+const PROVIDER_ID = "kimi-for-coding";
+const BASE_URL = "https://api.kimi.com/coding/v1";
+const KIMI_CODING_MODELS = [
+	"k3",
+	"k3-256k",
+	"kimi-for-coding",
+	"kimi-for-coding-highspeed"
+];
+let authStorageInstance = null;
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+function buildKimiCodingOAuthFetch(options = {}) {
+	return (async (input, init) => {
+		const store = options.credentialStore ?? getAuthStorage();
+		store.reload();
+		const credential = store.get(PROVIDER_ID);
+		if (!credential || credential.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to Kimi For Coding.");
+		if (!isKimiCodingDeviceId(credential.deviceId)) throw new ProviderAuthRequiredError("Kimi For Coding credentials are invalid. Please reconnect the account.");
+		const deviceHeaders = getKimiCodingDeviceHeaders(credential.deviceId);
+		const token = await store.getApiKey(PROVIDER_ID);
+		if (!token) throw new ProviderAuthRequiredError("Failed to refresh the Kimi For Coding token.");
+		const headers = new Headers(input instanceof Request ? input.headers : void 0);
+		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
+		for (const [key, value] of Object.entries(deviceHeaders)) headers.set(key, value);
+		headers.delete("authorization");
+		headers.delete("x-api-key");
+		headers.set("Authorization", `Bearer ${token}`);
+		return fetch(input, {
+			...init,
+			headers
+		});
+	});
+}
+function buildKimiCodingApiKeyFetch(apiKey) {
+	return (async (input, init) => {
+		const headers = new Headers(input instanceof Request ? input.headers : void 0);
+		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
+		headers.delete("authorization");
+		headers.delete("x-api-key");
+		headers.set("Authorization", `Bearer ${apiKey}`);
+		return fetch(input, {
+			...init,
+			headers
+		});
+	});
+}
+function kimiCodingProvider(modelId, options) {
+	const usesOAuth = options.credentialStore?.get(PROVIDER_ID)?.type === "oauth";
+	return createAnthropic({
+		apiKey: "auth-placeholder",
+		baseURL: BASE_URL,
+		headers: options.headers,
+		fetch: usesOAuth ? buildKimiCodingOAuthFetch({ credentialStore: options.credentialStore }) : buildKimiCodingApiKeyFetch(options.apiKey)
+	})(modelId);
+}
+//#endregion
+export { KIMI_CODING_MODELS, buildKimiCodingApiKeyFetch, buildKimiCodingOAuthFetch, kimiCodingProvider, setAuthStorage };
+
+//# sourceMappingURL=kimi-coding.js.map

package/dist/providers/kimi-coding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi-coding.js","names":[],"sources":["../../src/providers/kimi-coding.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { ProviderAuthRequiredError } from '../auth/provider-auth-error.js';\nimport { getKimiCodingDeviceHeaders, isKimiCodingDeviceId } from '../auth/providers/kimi-coding.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\nconst PROVIDER_ID = 'kimi-for-coding';\n// Pi's provider root is https://api.kimi.com/coding. The AI SDK expects the\n// versioned Anthropic base URL and appends /messages itself.\nconst BASE_URL = 'https://api.kimi.com/coding/v1';\n\nexport const KIMI_CODING_MODELS = ['k3', 'k3-256k', 'kimi-for-coding', 'kimi-for-coding-highspeed'] as const;\n\nlet authStorageInstance: AuthStorage | null = null;\n\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\nfunction getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) authStorageInstance = new AuthStorage();\n  return authStorageInstance;\n}\n\nexport function buildKimiCodingOAuthFetch(options: { credentialStore?: CredentialStore } = {}): typeof fetch {\n  return (async (input: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const store = options.credentialStore ?? getAuthStorage();\n    store.reload();\n    const credential = store.get(PROVIDER_ID);\n    if (!credential || credential.type !== 'oauth') {\n      throw new ProviderAuthRequiredError('Not logged in to Kimi For Coding.');\n    }\n    if (!isKimiCodingDeviceId(credential.deviceId)) {\n      throw new ProviderAuthRequiredError('Kimi For Coding credentials are invalid. Please reconnect the account.');\n    }\n    const deviceHeaders = getKimiCodingDeviceHeaders(credential.deviceId);\n    const token = await store.getApiKey(PROVIDER_ID);\n    if (!token) throw new ProviderAuthRequiredError('Failed to refresh the Kimi For Coding token.');\n\n    const headers = new Headers(input instanceof Request ? input.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    for (const [key, value] of Object.entries(deviceHeaders)) headers.set(key, value);\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${token}`);\n    return fetch(input, { ...init, headers });\n  }) as typeof fetch;\n}\n\nexport function buildKimiCodingApiKeyFetch(apiKey: string): typeof fetch {\n  return (async (input: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const headers = new Headers(input instanceof Request ? input.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${apiKey}`);\n    return fetch(input, { ...init, headers });\n  }) as typeof fetch;\n}\n\nexport function kimiCodingProvider(\n  modelId: string,\n  options: { apiKey: string; headers?: Record<string, string>; credentialStore?: CredentialStore },\n): MastraModelConfig {\n  const usesOAuth = options.credentialStore?.get(PROVIDER_ID)?.type === 'oauth';\n  const provider = createAnthropic({\n    apiKey: 'auth-placeholder',\n    baseURL: BASE_URL,\n    headers: options.headers,\n    fetch: usesOAuth\n      ? (buildKimiCodingOAuthFetch({ credentialStore: options.credentialStore }) as any)\n      : (buildKimiCodingApiKeyFetch(options.apiKey) as any),\n  });\n  return provider(modelId) as unknown as MastraModelConfig;\n}\n"],"mappings":";;;;;AAOA,MAAM,cAAc;AAGpB,MAAM,WAAW;AAEjB,MAAa,qBAAqB;CAAC;CAAM;CAAW;CAAmB;AAA2B;AAElG,IAAI,sBAA0C;AAE9C,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;AAEA,SAAS,iBAA8B;CACrC,IAAI,CAAC,qBAAqB,sBAAsB,IAAI,YAAY;CAChE,OAAO;AACT;AAEA,SAAgB,0BAA0B,UAAiD,CAAC,GAAiB;CAC3G,QAAQ,OAAO,OAA+B,SAAuC;EACnF,MAAM,QAAQ,QAAQ,mBAAmB,eAAe;EACxD,MAAM,OAAO;EACb,MAAM,aAAa,MAAM,IAAI,WAAW;EACxC,IAAI,CAAC,cAAc,WAAW,SAAS,SACrC,MAAM,IAAI,0BAA0B,mCAAmC;EAEzE,IAAI,CAAC,qBAAqB,WAAW,QAAQ,GAC3C,MAAM,IAAI,0BAA0B,wEAAwE;EAE9G,MAAM,gBAAgB,2BAA2B,WAAW,QAAQ;EACpE,MAAM,QAAQ,MAAM,MAAM,UAAU,WAAW;EAC/C,IAAI,CAAC,OAAO,MAAM,IAAI,0BAA0B,8CAA8C;EAE9F,MAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,KAAA,CAAS;EAChF,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,GAAG,QAAQ,IAAI,KAAK,KAAK;EAChF,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,OAAO;EAC9C,OAAO,MAAM,OAAO;GAAE,GAAG;GAAM;EAAQ,CAAC;CAC1C;AACF;AAEA,SAAgB,2BAA2B,QAA8B;CACvE,QAAQ,OAAO,OAA+B,SAAuC;EACnF,MAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,KAAA,CAAS;EAChF,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;EAC/C,OAAO,MAAM,OAAO;GAAE,GAAG;GAAM;EAAQ,CAAC;CAC1C;AACF;AAEA,SAAgB,mBACd,SACA,SACmB;CACnB,MAAM,YAAY,QAAQ,iBAAiB,IAAI,WAAW,CAAC,EAAE,SAAS;CAStE,OARiB,gBAAgB;EAC/B,QAAQ;EACR,SAAS;EACT,SAAS,QAAQ;EACjB,OAAO,YACF,0BAA0B,EAAE,iBAAiB,QAAQ,gBAAgB,CAAC,IACtE,2BAA2B,QAAQ,MAAM;CAChD,CACc,CAAC,CAAC,OAAO;AACzB"}

package/dist/providers/openai-codex.d.ts

@@ -0,0 +1,73 @@
+/**
+ * OpenAI Codex OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.
+ * This allows access to OpenAI models through the ChatGPT OAuth flow.
+ *
+ * Inspired by opencode's Codex plugin implementation:
+ * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import type { LanguageModelMiddleware } from 'ai';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+import type { ThinkingLevelSetting } from '../thinking.js';
+export { supportsMaxReasoningEffort } from '../thinking.js';
+/**
+ * Get or create the shared AuthStorage instance
+ */
+export declare function getAuthStorage(): AuthStorage;
+/**
+ * Set a custom AuthStorage instance (useful for TUI integration)
+ */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+export type ThinkingLevel = ThinkingLevelSetting;
+export declare function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel;
+export declare const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined>;
+/**
+ * Create Codex middleware with the given reasoning effort level.
+ */
+export declare function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware;
+/**
+ * Build a fetch function that handles OpenAI Codex OAuth.
+ * Preserves non-authorization headers from init.
+ * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions
+ * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the
+ * SDK already targets the correct URL.
+ */
+export declare function buildOpenAICodexOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+    rewriteUrl?: boolean;
+}): typeof fetch;
+/**
+ * Build a fetch function for Stagehand-on-Codex.
+ *
+ * The Codex backend has two requirements that AI SDK's non-streaming
+ * `generateText` path doesn't naturally satisfy:
+ *
+ *   1. `stream: true` must be set on every request body.
+ *   2. The response is delivered as Server-Sent Events; AI SDK's
+ *      non-streaming code path expects a single JSON body.
+ *
+ * This fetch forces streaming on the outgoing request, collects the SSE
+ * events, and synthesizes the non-streaming JSON shape that
+ * `@ai-sdk/openai`'s Responses API parser expects.
+ *
+ * Headers, OAuth refresh, and URL targeting are handled by the caller via
+ * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the
+ * live OAuth bearer per call.
+ */
+export declare function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch;
+/**
+ * Creates an OpenAI model using ChatGPT OAuth authentication
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+ *
+ * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.
+ * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.
+ */
+export declare function openaiCodexProvider(modelId?: string, options?: {
+    thinkingLevel?: ThinkingLevel;
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=openai-codex.d.ts.map

package/dist/providers/openai-codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../src/providers/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAU5D;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAIjD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAY9F;AAMD,eAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAOxF,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4BvF;AAqCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAyDd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,KAAK,CAgC/E;AAwID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC3G,iBAAiB,CAmCnB"}

package/dist/providers/openai-codex.js

@@ -0,0 +1,306 @@
+import { AuthStorage } from "../auth/storage.js";
+import { ProviderAuthRequiredError } from "../auth/provider-auth-error.js";
+import { supportsMaxReasoningEffort } from "../thinking.js";
+import { createOpenAI } from "@ai-sdk/openai";
+import { wrapLanguageModel } from "ai";
+//#region src/providers/openai-codex.ts
+/**
+* OpenAI Codex OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.
+* This allows access to OpenAI models through the ChatGPT OAuth flow.
+*
+* Inspired by opencode's Codex plugin implementation:
+* https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts
+*/
+const CODEX_API_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
+const CODEX_ORIGINATOR = "mastracode";
+const CODEX_USER_AGENT = "mastracode";
+let authStorageInstance = null;
+/**
+* Get or create the shared AuthStorage instance
+*/
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+/**
+* Set a custom AuthStorage instance (useful for TUI integration)
+*/
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+const CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.
+
+IMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;
+const GPT5_MODEL_RE = /^gpt-5(?:\.|-|$)/;
+function getEffectiveThinkingLevel(modelId, level) {
+	if (GPT5_MODEL_RE.test(modelId) && level === "off") return "low";
+	if (level === "max" && !supportsMaxReasoningEffort(modelId)) return "xhigh";
+	return level;
+}
+const THINKING_LEVEL_TO_REASONING_EFFORT = {
+	off: void 0,
+	low: "low",
+	medium: "medium",
+	high: "high",
+	xhigh: "xhigh",
+	max: "max"
+};
+/**
+* Create Codex middleware with the given reasoning effort level.
+*/
+function createCodexMiddleware(reasoningEffort) {
+	return {
+		specificationVersion: "v3",
+		transformParams: async ({ params }) => {
+			if (params.temperature !== void 0 && params.temperature !== null) delete params.topP;
+			params.providerOptions = {
+				...params.providerOptions,
+				openai: {
+					...params.providerOptions?.openai ?? {},
+					instructions: CODEX_INSTRUCTIONS,
+					store: false,
+					...reasoningEffort ? { reasoningEffort } : {}
+				}
+			};
+			return params;
+		}
+	};
+}
+/**
+* Get a live OAuth bearer token for the Codex OAuth credential.
+*
+* Refreshes the token if it's expired, and returns the credential's
+* accountId alongside the access token. Throws if the user isn't logged in
+* or if the refresh fails.
+*
+* This is the only piece of Codex auth that is genuinely shared between
+* the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand
+* fetch (`buildCodexStagehandFetch`).
+*/
+async function getCodexBearer(authStorage) {
+	const storage = authStorage ?? getAuthStorage();
+	storage.reload();
+	const cred = storage.get("openai-codex");
+	if (!cred || cred.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to OpenAI Codex.");
+	let accessToken = cred.access;
+	if (Date.now() >= cred.expires) {
+		const refreshedToken = await storage.getApiKey("openai-codex");
+		if (!refreshedToken) throw new ProviderAuthRequiredError("Failed to refresh the OpenAI Codex token.");
+		accessToken = refreshedToken;
+		storage.reload();
+	}
+	return {
+		accessToken,
+		accountId: cred.accountId
+	};
+}
+/**
+* Build a fetch function that handles OpenAI Codex OAuth.
+* Preserves non-authorization headers from init.
+* When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions
+* to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the
+* SDK already targets the correct URL.
+*/
+function buildOpenAICodexOAuthFetch(opts = {}) {
+	return (async (url, init) => {
+		const { accessToken, accountId } = await getCodexBearer(opts.authStorage);
+		const headers = new Headers();
+		if (init?.headers) {
+			if (init.headers instanceof Headers) init.headers.forEach((value, key) => {
+				if (key.toLowerCase() !== "authorization") headers.set(key, value);
+			});
+			else if (Array.isArray(init.headers)) {
+				for (const [key, value] of init.headers) if (key.toLowerCase() !== "authorization" && value !== void 0) headers.set(key, String(value));
+			} else for (const [key, value] of Object.entries(init.headers)) if (key.toLowerCase() !== "authorization" && value !== void 0) headers.set(key, String(value));
+		}
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		if (!headers.has("originator")) headers.set("originator", CODEX_ORIGINATOR);
+		if (!headers.has("User-Agent")) headers.set("User-Agent", CODEX_USER_AGENT);
+		if (accountId) headers.set("ChatGPT-Account-ID", accountId);
+		const parsed = url instanceof URL ? url : new URL(typeof url === "string" ? url : url.url);
+		const finalUrl = opts.rewriteUrl !== false && (parsed.pathname.includes("/v1/responses") || parsed.pathname.includes("/chat/completions")) ? new URL(CODEX_API_ENDPOINT) : parsed;
+		try {
+			return await fetch(finalUrl, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: finalUrl.toString() });
+			throw error;
+		}
+	});
+}
+/**
+* Build a fetch function for Stagehand-on-Codex.
+*
+* The Codex backend has two requirements that AI SDK's non-streaming
+* `generateText` path doesn't naturally satisfy:
+*
+*   1. `stream: true` must be set on every request body.
+*   2. The response is delivered as Server-Sent Events; AI SDK's
+*      non-streaming code path expects a single JSON body.
+*
+* This fetch forces streaming on the outgoing request, collects the SSE
+* events, and synthesizes the non-streaming JSON shape that
+* `@ai-sdk/openai`'s Responses API parser expects.
+*
+* Headers, OAuth refresh, and URL targeting are handled by the caller via
+* `baseURL` / `headers` on the AI SDK provider; this fetch only injects the
+* live OAuth bearer per call.
+*/
+function buildCodexStagehandFetch(authStorage) {
+	return (async (url, init) => {
+		const { accessToken } = await getCodexBearer(authStorage);
+		const headers = new Headers(init?.headers);
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		headers.set("Accept", "text/event-stream");
+		let body = init?.body;
+		if (typeof init?.body === "string") try {
+			const parsed = JSON.parse(init.body);
+			parsed.stream = true;
+			body = JSON.stringify(parsed);
+			if (!headers.has("content-type")) headers.set("content-type", "application/json");
+		} catch {}
+		const upstream = await fetch(url, {
+			...init,
+			headers,
+			body
+		});
+		if (!upstream.ok) return upstream;
+		const aggregated = await aggregateCodexStream(upstream);
+		return new Response(aggregated, {
+			status: 200,
+			headers: { "content-type": "application/json" }
+		});
+	});
+}
+/**
+* Read an SSE Response and reduce it to a single JSON string matching the
+* non-streaming OpenAI Responses-API shape.
+*
+* Event vocabulary we care about (per OpenAI Responses API streaming):
+*   - response.created         → carries `response` object (id, model, usage stub)
+*   - response.output_item.added/done → output items (message, reasoning, etc.)
+*   - response.output_text.delta → text chunks
+*   - response.completed       → final `response` snapshot incl. usage
+*   - response.error / error   → bubble up as a thrown body
+*
+* Reasoning events (`response.reasoning_summary.*`) are intentionally ignored
+* for the non-streaming text response.
+*/
+async function aggregateCodexStream(response) {
+	if (!response.body) throw new Error("Codex streaming response had no body");
+	const reader = response.body.getReader();
+	const decoder = new TextDecoder("utf-8");
+	let buffer = "";
+	let finalResponse = null;
+	let createdResponse = null;
+	const items = /* @__PURE__ */ new Map();
+	const textBuffers = /* @__PURE__ */ new Map();
+	const handleEvent = (event) => {
+		if (!event.data || event.data === "[DONE]") return;
+		let payload;
+		try {
+			payload = JSON.parse(event.data);
+		} catch {
+			return;
+		}
+		switch (payload.type ?? event.event ?? "") {
+			case "response.created":
+				createdResponse = payload.response ?? createdResponse;
+				break;
+			case "response.output_item.added":
+				if (typeof payload.output_index === "number" && payload.item) items.set(payload.output_index, payload.item);
+				break;
+			case "response.output_item.done":
+				if (typeof payload.output_index === "number" && payload.item) items.set(payload.output_index, payload.item);
+				break;
+			case "response.output_text.delta": {
+				const key = `${payload.output_index}:${payload.content_index ?? 0}`;
+				textBuffers.set(key, (textBuffers.get(key) ?? "") + (payload.delta ?? ""));
+				break;
+			}
+			case "response.completed":
+				finalResponse = payload.response ?? finalResponse;
+				break;
+			case "response.error":
+			case "error": throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);
+			default: break;
+		}
+	};
+	const processChunk = (chunk) => {
+		buffer += chunk.replace(/\r\n/g, "\n");
+		let sepIdx;
+		while ((sepIdx = buffer.indexOf("\n\n")) !== -1) {
+			const raw = buffer.slice(0, sepIdx);
+			buffer = buffer.slice(sepIdx + 2);
+			const event = {};
+			const dataLines = [];
+			for (const line of raw.split("\n")) if (line.startsWith("event:")) event.event = line.slice(6).trim();
+			else if (line.startsWith("data:")) dataLines.push(line.slice(5).trimStart());
+			if (dataLines.length > 0) event.data = dataLines.join("\n");
+			handleEvent(event);
+		}
+	};
+	try {
+		while (true) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			processChunk(decoder.decode(value, { stream: true }));
+		}
+		processChunk(decoder.decode());
+	} finally {
+		reader.releaseLock();
+	}
+	const base = finalResponse ?? createdResponse ?? { output: [] };
+	const finalItems = Array.from(items.entries()).sort(([a], [b]) => a - b).map(([index, item]) => {
+		if (item?.type === "message" && Array.isArray(item.content)) item.content = item.content.map((c, ci) => {
+			const key = `${index}:${ci}`;
+			if (textBuffers.has(key)) return {
+				...c,
+				text: textBuffers.get(key)
+			};
+			return c;
+		});
+		return item;
+	});
+	base.output = finalItems.length > 0 ? finalItems : base.output ?? [];
+	return JSON.stringify(base);
+}
+/**
+* Creates an OpenAI model using ChatGPT OAuth authentication
+* Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+*
+* IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.
+* URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.
+*/
+function openaiCodexProvider(modelId = "codex-mini-latest", options) {
+	const effectiveLevel = getEffectiveThinkingLevel(modelId, options?.thinkingLevel ?? "medium");
+	const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];
+	const middleware = createCodexMiddleware(reasoningEffort);
+	const headers = options?.headers;
+	const baseURL = process.env.OPENAI_BASE_URL;
+	if (process.env.NODE_ENV === "test" || process.env.VITEST) return wrapLanguageModel({
+		model: createOpenAI({
+			apiKey: "test-api-key",
+			baseURL,
+			headers
+		}).responses(modelId),
+		middleware: [middleware]
+	});
+	return wrapLanguageModel({
+		model: createOpenAI({
+			apiKey: "oauth-dummy-key",
+			baseURL,
+			headers,
+			fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage })
+		}).responses(modelId),
+		middleware: [middleware]
+	});
+}
+//#endregion
+export { THINKING_LEVEL_TO_REASONING_EFFORT, buildCodexStagehandFetch, buildOpenAICodexOAuthFetch, createCodexMiddleware, getAuthStorage, getEffectiveThinkingLevel, openaiCodexProvider, setAuthStorage, supportsMaxReasoningEffort };
+
+//# sourceMappingURL=openai-codex.js.map

package/dist/providers/openai-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex.js","names":[],"sources":["../../src/providers/openai-codex.ts"],"sourcesContent":["/**\n * OpenAI Codex OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.\n * This allows access to OpenAI models through the ChatGPT OAuth flow.\n *\n * Inspired by opencode's Codex plugin implementation:\n * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts\n */\n\nimport { createOpenAI } from '@ai-sdk/openai';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { ProviderAuthRequiredError } from '../auth/provider-auth-error.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { supportsMaxReasoningEffort } from '../thinking.js';\nimport type { ThinkingLevelSetting } from '../thinking.js';\nexport { supportsMaxReasoningEffort } from '../thinking.js';\n\n// Codex API endpoint (not standard OpenAI API)\nconst CODEX_API_ENDPOINT = 'https://chatgpt.com/backend-api/codex/responses';\nconst CODEX_ORIGINATOR = 'mastracode';\nconst CODEX_USER_AGENT = 'mastracode';\n\n// Singleton auth storage instance (shared with claude-max.ts)\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n// Default instructions for Codex API (required)\nconst CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nIMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;\n\nexport type ThinkingLevel = ThinkingLevelSetting;\n\nconst GPT5_MODEL_RE = /^gpt-5(?:\\.|-|$)/;\n\nexport function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  // GPT-5.* models on Codex require at least low reasoning.\n  if (GPT5_MODEL_RE.test(modelId) && level === 'off') {\n    return 'low';\n  }\n\n  // Clamp `max` to `xhigh` only for models whose effort scale tops out there.\n  if (level === 'max' && !supportsMaxReasoningEffort(modelId)) {\n    return 'xhigh';\n  }\n\n  return level;\n}\n\n// Map thinkingLevel state values to OpenAI reasoningEffort values.\n// undefined means omit the parameter (no reasoning). Model-dependent clamping\n// (e.g. `max` → `xhigh` for pre-GPT-5.6 models) happens in\n// getEffectiveThinkingLevel before this lookup.\nexport const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined> = {\n  off: undefined,\n  low: 'low',\n  medium: 'medium',\n  high: 'high',\n  xhigh: 'xhigh',\n  max: 'max',\n};\n\n/**\n * Create Codex middleware with the given reasoning effort level.\n */\nexport function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      // Remove topP if temperature is set (OpenAI doesn't like both)\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      // Codex API requires specific settings via providerOptions\n      // Use type assertion to satisfy JSONValue constraints\n      params.providerOptions = {\n        ...params.providerOptions,\n        openai: {\n          ...(params.providerOptions?.openai ?? {}),\n          instructions: CODEX_INSTRUCTIONS,\n          // Codex API requires store to be false\n          store: false,\n          // Enable reasoning for Codex models — without this, the model\n          // skips the reasoning/action phase and goes straight to final_answer,\n          // resulting in narration instead of tool calls.\n          ...(reasoningEffort ? { reasoningEffort } : {}),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Get a live OAuth bearer token for the Codex OAuth credential.\n *\n * Refreshes the token if it's expired, and returns the credential's\n * accountId alongside the access token. Throws if the user isn't logged in\n * or if the refresh fails.\n *\n * This is the only piece of Codex auth that is genuinely shared between\n * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand\n * fetch (`buildCodexStagehandFetch`).\n */\nasync function getCodexBearer(\n  authStorage?: CredentialStore,\n): Promise<{ accessToken: string; accountId: string | undefined }> {\n  const storage = authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get('openai-codex');\n  if (!cred || cred.type !== 'oauth') {\n    throw new ProviderAuthRequiredError('Not logged in to OpenAI Codex.');\n  }\n\n  let accessToken = cred.access;\n  if (Date.now() >= cred.expires) {\n    const refreshedToken = await storage.getApiKey('openai-codex');\n    if (!refreshedToken) {\n      throw new ProviderAuthRequiredError('Failed to refresh the OpenAI Codex token.');\n    }\n    accessToken = refreshedToken;\n    storage.reload();\n  }\n\n  return { accessToken, accountId: (cred as any).accountId as string | undefined };\n}\n\n/**\n * Build a fetch function that handles OpenAI Codex OAuth.\n * Preserves non-authorization headers from init.\n * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions\n * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the\n * SDK already targets the correct URL.\n */\nexport function buildOpenAICodexOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { accessToken, accountId } = await getCodexBearer(opts.authStorage);\n\n    // Preserve non-authorization headers\n    const headers = new Headers();\n    if (init?.headers) {\n      if (init.headers instanceof Headers) {\n        init.headers.forEach((value, key) => {\n          if (key.toLowerCase() !== 'authorization') {\n            headers.set(key, value);\n          }\n        });\n      } else if (Array.isArray(init.headers)) {\n        for (const [key, value] of init.headers) {\n          if (key!.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key!, String(value));\n          }\n        }\n      } else {\n        for (const [key, value] of Object.entries(init.headers)) {\n          if (key.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key, String(value));\n          }\n        }\n      }\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    if (!headers.has('originator')) {\n      headers.set('originator', CODEX_ORIGINATOR);\n    }\n    if (!headers.has('User-Agent')) {\n      headers.set('User-Agent', CODEX_USER_AGENT);\n    }\n    if (accountId) {\n      headers.set('ChatGPT-Account-ID', accountId);\n    }\n\n    // URL rewriting — only when rewriteUrl !== false\n    const parsed = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n    const shouldRewrite =\n      opts.rewriteUrl !== false &&\n      (parsed.pathname.includes('/v1/responses') || parsed.pathname.includes('/chat/completions'));\n    const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Build a fetch function for Stagehand-on-Codex.\n *\n * The Codex backend has two requirements that AI SDK's non-streaming\n * `generateText` path doesn't naturally satisfy:\n *\n *   1. `stream: true` must be set on every request body.\n *   2. The response is delivered as Server-Sent Events; AI SDK's\n *      non-streaming code path expects a single JSON body.\n *\n * This fetch forces streaming on the outgoing request, collects the SSE\n * events, and synthesizes the non-streaming JSON shape that\n * `@ai-sdk/openai`'s Responses API parser expects.\n *\n * Headers, OAuth refresh, and URL targeting are handled by the caller via\n * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the\n * live OAuth bearer per call.\n */\nexport function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    // Refresh + inject the OAuth bearer per call\n    const { accessToken } = await getCodexBearer(authStorage);\n    const headers = new Headers(init?.headers);\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('Accept', 'text/event-stream');\n\n    // Force stream: true on the request body\n    type FetchBody = NonNullable<Parameters<typeof fetch>[1]>['body'];\n    let body: FetchBody | undefined = init?.body;\n    if (typeof init?.body === 'string') {\n      try {\n        const parsed = JSON.parse(init.body) as Record<string, unknown>;\n        parsed.stream = true;\n        body = JSON.stringify(parsed);\n        if (!headers.has('content-type')) headers.set('content-type', 'application/json');\n      } catch {\n        // Not JSON; leave as-is\n      }\n    }\n\n    const upstream = await fetch(url, { ...init, headers, body });\n    if (!upstream.ok) return upstream;\n\n    // Aggregate SSE -> synthesized non-streaming Response\n    const aggregated = await aggregateCodexStream(upstream);\n    return new Response(aggregated, {\n      status: 200,\n      headers: { 'content-type': 'application/json' },\n    });\n  }) as typeof fetch;\n}\n\n/**\n * Read an SSE Response and reduce it to a single JSON string matching the\n * non-streaming OpenAI Responses-API shape.\n *\n * Event vocabulary we care about (per OpenAI Responses API streaming):\n *   - response.created         → carries `response` object (id, model, usage stub)\n *   - response.output_item.added/done → output items (message, reasoning, etc.)\n *   - response.output_text.delta → text chunks\n *   - response.completed       → final `response` snapshot incl. usage\n *   - response.error / error   → bubble up as a thrown body\n *\n * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored\n * for the non-streaming text response.\n */\nasync function aggregateCodexStream(response: Response): Promise<string> {\n  if (!response.body) {\n    throw new Error('Codex streaming response had no body');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder('utf-8');\n  let buffer = '';\n\n  let finalResponse: any = null;\n  let createdResponse: any = null;\n  // Track output_items by index so we can rebuild the final array\n  const items = new Map<number, any>();\n  // Accumulate output_text deltas keyed by item_index + content_index\n  const textBuffers = new Map<string, string>();\n\n  const handleEvent = (event: { event?: string; data?: string }) => {\n    if (!event.data || event.data === '[DONE]') return;\n    let payload: any;\n    try {\n      payload = JSON.parse(event.data);\n    } catch {\n      return;\n    }\n    const type: string = payload.type ?? event.event ?? '';\n\n    switch (type) {\n      case 'response.created': {\n        createdResponse = payload.response ?? createdResponse;\n        break;\n      }\n      case 'response.output_item.added': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_item.done': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_text.delta': {\n        const key = `${payload.output_index}:${payload.content_index ?? 0}`;\n        textBuffers.set(key, (textBuffers.get(key) ?? '') + (payload.delta ?? ''));\n        break;\n      }\n      case 'response.completed': {\n        finalResponse = payload.response ?? finalResponse;\n        break;\n      }\n      case 'response.error':\n      case 'error': {\n        throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);\n      }\n      default:\n        // Ignore reasoning / unknown events\n        break;\n    }\n  };\n\n  // SSE parser: events separated by blank line; lines like \"event: x\" / \"data: y\"\n  // Normalize CRLF→LF so \\r\\n\\r\\n event boundaries parse correctly (SSE spec allows CRLF).\n  const processChunk = (chunk: string) => {\n    buffer += chunk.replace(/\\r\\n/g, '\\n');\n    let sepIdx: number;\n    while ((sepIdx = buffer.indexOf('\\n\\n')) !== -1) {\n      const raw = buffer.slice(0, sepIdx);\n      buffer = buffer.slice(sepIdx + 2);\n      const event: { event?: string; data?: string } = {};\n      const dataLines: string[] = [];\n      for (const line of raw.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event.event = line.slice(6).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice(5).trimStart());\n        }\n      }\n      if (dataLines.length > 0) {\n        event.data = dataLines.join('\\n');\n      }\n      handleEvent(event);\n    }\n  };\n\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      processChunk(decoder.decode(value, { stream: true }));\n    }\n    processChunk(decoder.decode());\n  } finally {\n    reader.releaseLock();\n  }\n\n  // Stitch accumulated text deltas back into their items\n  const base = finalResponse ?? createdResponse ?? { output: [] };\n  const finalItems = Array.from(items.entries())\n    .sort(([a], [b]) => a - b)\n    .map(([index, item]) => {\n      // Patch message-type items' content text using buffered deltas\n      if (item?.type === 'message' && Array.isArray(item.content)) {\n        item.content = item.content.map((c: any, ci: number) => {\n          const key = `${index}:${ci}`;\n          if (textBuffers.has(key)) {\n            return { ...c, text: textBuffers.get(key) };\n          }\n          return c;\n        });\n      }\n      return item;\n    });\n\n  base.output = finalItems.length > 0 ? finalItems : (base.output ?? []);\n\n  return JSON.stringify(base);\n}\n\n/**\n * Creates an OpenAI model using ChatGPT OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n *\n * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.\n * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.\n */\nexport function openaiCodexProvider(\n  modelId: string = 'codex-mini-latest',\n  options?: { thinkingLevel?: ThinkingLevel; headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const requestedLevel: ThinkingLevel = options?.thinkingLevel ?? 'medium';\n  const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);\n  const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n  const middleware = createCodexMiddleware(reasoningEffort);\n  const headers = options?.headers;\n\n  const baseURL = process.env.OPENAI_BASE_URL;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const openai = createOpenAI({\n      apiKey: 'test-api-key',\n      baseURL,\n      headers,\n    });\n    return wrapLanguageModel({\n      model: openai.responses(modelId),\n      middleware: [middleware],\n    });\n  }\n\n  const openai = createOpenAI({\n    apiKey: 'oauth-dummy-key',\n    baseURL,\n    headers,\n    fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Use the responses API for Codex models\n  // Wrap with middleware\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [middleware],\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;AAsBA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAGzB,IAAI,sBAA0C;;;;AAK9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;AAGA,MAAM,qBAAqB;;;AAM3B,MAAM,gBAAgB;AAEtB,SAAgB,0BAA0B,SAAiB,OAAqC;CAE9F,IAAI,cAAc,KAAK,OAAO,KAAK,UAAU,OAC3C,OAAO;CAIT,IAAI,UAAU,SAAS,CAAC,2BAA2B,OAAO,GACxD,OAAO;CAGT,OAAO;AACT;AAMA,MAAa,qCAAgF;CAC3F,KAAK,KAAA;CACL,KAAK;CACL,QAAQ;CACR,MAAM;CACN,OAAO;CACP,KAAK;AACP;;;;AAKA,SAAgB,sBAAsB,iBAAmD;CACvF,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GAErC,IAAI,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,MAC7D,OAAO,OAAO;GAKhB,OAAO,kBAAkB;IACvB,GAAG,OAAO;IACV,QAAQ;KACN,GAAI,OAAO,iBAAiB,UAAU,CAAC;KACvC,cAAc;KAEd,OAAO;KAIP,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;IAC/C;GACF;GAEA,OAAO;EACT;CACF;AACF;;;;;;;;;;;;AAaA,eAAe,eACb,aACiE;CACjE,MAAM,UAAU,eAAe,eAAe;CAC9C,QAAQ,OAAO;CAEf,MAAM,OAAO,QAAQ,IAAI,cAAc;CACvC,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,0BAA0B,gCAAgC;CAGtE,IAAI,cAAc,KAAK;CACvB,IAAI,KAAK,IAAI,KAAK,KAAK,SAAS;EAC9B,MAAM,iBAAiB,MAAM,QAAQ,UAAU,cAAc;EAC7D,IAAI,CAAC,gBACH,MAAM,IAAI,0BAA0B,2CAA2C;EAEjF,cAAc;EACd,QAAQ,OAAO;CACjB;CAEA,OAAO;EAAE;EAAa,WAAY,KAAa;CAAgC;AACjF;;;;;;;;AASA,SAAgB,2BACd,OAAgE,CAAC,GACnD;CACd,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,EAAE,aAAa,cAAc,MAAM,eAAe,KAAK,WAAW;EAGxE,MAAM,UAAU,IAAI,QAAQ;EAC5B,IAAI,MAAM,SACJ;OAAA,KAAK,mBAAmB,SAC1B,KAAK,QAAQ,SAAS,OAAO,QAAQ;IACnC,IAAI,IAAI,YAAY,MAAM,iBACxB,QAAQ,IAAI,KAAK,KAAK;GAE1B,CAAC;QACI,IAAI,MAAM,QAAQ,KAAK,OAAO,GAC9B;SAAA,MAAM,CAAC,KAAK,UAAU,KAAK,SAC9B,IAAI,IAAK,YAAY,MAAM,mBAAmB,UAAU,KAAA,GACtD,QAAQ,IAAI,KAAM,OAAO,KAAK,CAAC;GAAA,OAInC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,GACpD,IAAI,IAAI,YAAY,MAAM,mBAAmB,UAAU,KAAA,GACrD,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;EAAA;EAMtC,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,gBAAgB;EAE5C,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,gBAAgB;EAE5C,IAAI,WACF,QAAQ,IAAI,sBAAsB,SAAS;EAI7C,MAAM,SAAS,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;EAItG,MAAM,WAFJ,KAAK,eAAe,UACnB,OAAO,SAAS,SAAS,eAAe,KAAK,OAAO,SAAS,SAAS,mBAAmB,KAC3D,IAAI,IAAI,kBAAkB,IAAI;EAE/D,IAAI;GACF,OAAO,MAAM,MAAM,UAAU;IAAE,GAAG;IAAM;GAAQ,CAAC;EACnD,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,SAAS,SAAS,EAChC,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,yBAAyB,aAAwC;CAC/E,QAAQ,OAAO,KAA6B,SAAuC;EAEjF,MAAM,EAAE,gBAAgB,MAAM,eAAe,WAAW;EACxD,MAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;EACzC,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,QAAQ,IAAI,UAAU,mBAAmB;EAIzC,IAAI,OAA8B,MAAM;EACxC,IAAI,OAAO,MAAM,SAAS,UACxB,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,KAAK,IAAI;GACnC,OAAO,SAAS;GAChB,OAAO,KAAK,UAAU,MAAM;GAC5B,IAAI,CAAC,QAAQ,IAAI,cAAc,GAAG,QAAQ,IAAI,gBAAgB,kBAAkB;EAClF,QAAQ,CAER;EAGF,MAAM,WAAW,MAAM,MAAM,KAAK;GAAE,GAAG;GAAM;GAAS;EAAK,CAAC;EAC5D,IAAI,CAAC,SAAS,IAAI,OAAO;EAGzB,MAAM,aAAa,MAAM,qBAAqB,QAAQ;EACtD,OAAO,IAAI,SAAS,YAAY;GAC9B,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;EAChD,CAAC;CACH;AACF;;;;;;;;;;;;;;;AAgBA,eAAe,qBAAqB,UAAqC;CACvE,IAAI,CAAC,SAAS,MACZ,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,UAAU,IAAI,YAAY,OAAO;CACvC,IAAI,SAAS;CAEb,IAAI,gBAAqB;CACzB,IAAI,kBAAuB;CAE3B,MAAM,wBAAQ,IAAI,IAAiB;CAEnC,MAAM,8BAAc,IAAI,IAAoB;CAE5C,MAAM,eAAe,UAA6C;EAChE,IAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,UAAU;EAC5C,IAAI;EACJ,IAAI;GACF,UAAU,KAAK,MAAM,MAAM,IAAI;EACjC,QAAQ;GACN;EACF;EAGA,QAFqB,QAAQ,QAAQ,MAAM,SAAS,IAEpD;GACE,KAAK;IACH,kBAAkB,QAAQ,YAAY;IACtC;GAEF,KAAK;IACH,IAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MACtD,MAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;IAE9C;GAEF,KAAK;IACH,IAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MACtD,MAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;IAE9C;GAEF,KAAK,8BAA8B;IACjC,MAAM,MAAM,GAAG,QAAQ,aAAa,GAAG,QAAQ,iBAAiB;IAChE,YAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;IACzE;GACF;GACA,KAAK;IACH,gBAAgB,QAAQ,YAAY;IACpC;GAEF,KAAK;GACL,KAAK,SACH,MAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,QAAQ,SAAS,OAAO,GAAG;GAEnF,SAEE;EACJ;CACF;CAIA,MAAM,gBAAgB,UAAkB;EACtC,UAAU,MAAM,QAAQ,SAAS,IAAI;EACrC,IAAI;EACJ,QAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,IAAI;GAC/C,MAAM,MAAM,OAAO,MAAM,GAAG,MAAM;GAClC,SAAS,OAAO,MAAM,SAAS,CAAC;GAChC,MAAM,QAA2C,CAAC;GAClD,MAAM,YAAsB,CAAC;GAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAC/B,IAAI,KAAK,WAAW,QAAQ,GAC1B,MAAM,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;QAC5B,IAAI,KAAK,WAAW,OAAO,GAChC,UAAU,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;GAG5C,IAAI,UAAU,SAAS,GACrB,MAAM,OAAO,UAAU,KAAK,IAAI;GAElC,YAAY,KAAK;EACnB;CACF;CAEA,IAAI;EACF,OAAO,MAAM;GACX,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,aAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD;EACA,aAAa,QAAQ,OAAO,CAAC;CAC/B,UAAU;EACR,OAAO,YAAY;CACrB;CAGA,MAAM,OAAO,iBAAiB,mBAAmB,EAAE,QAAQ,CAAC,EAAE;CAC9D,MAAM,aAAa,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CACzB,KAAK,CAAC,OAAO,UAAU;EAEtB,IAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,KAAK,OAAO,GACxD,KAAK,UAAU,KAAK,QAAQ,KAAK,GAAQ,OAAe;GACtD,MAAM,MAAM,GAAG,MAAM,GAAG;GACxB,IAAI,YAAY,IAAI,GAAG,GACrB,OAAO;IAAE,GAAG;IAAG,MAAM,YAAY,IAAI,GAAG;GAAE;GAE5C,OAAO;EACT,CAAC;EAEH,OAAO;CACT,CAAC;CAEH,KAAK,SAAS,WAAW,SAAS,IAAI,aAAc,KAAK,UAAU,CAAC;CAEpE,OAAO,KAAK,UAAU,IAAI;AAC5B;;;;;;;;AASA,SAAgB,oBACd,UAAkB,qBAClB,SACmB;CAEnB,MAAM,iBAAiB,0BAA0B,SADX,SAAS,iBAAiB,QACQ;CACxE,MAAM,kBAAkB,mCAAmC;CAC3D,MAAM,aAAa,sBAAsB,eAAe;CACxD,MAAM,UAAU,SAAS;CAEzB,MAAM,UAAU,QAAQ,IAAI;CAG5B,IAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAMjD,OAAO,kBAAkB;EACvB,OANa,aAAa;GAC1B,QAAQ;GACR;GACA;EACF,CAEc,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC,UAAU;CACzB,CAAC;CAYH,OAAO,kBAAkB;EACvB,OAVa,aAAa;GAC1B,QAAQ;GACR;GACA;GACA,OAAO,2BAA2B,EAAE,aAAa,SAAS,YAAY,CAAC;EACzE,CAKc,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC,UAAU;CACzB,CAAC;AACH"}

package/dist/providers/xai.d.ts

@@ -0,0 +1,33 @@
+/**
+ * xAI (Grok) OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with the xAI API.
+ * The xAI API speaks an OpenAI-compatible chat format, and the OAuth access
+ * token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`
+ * into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)
+ * access token.
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+/** Get or create the shared AuthStorage instance. */
+export declare function getAuthStorage(): AuthStorage;
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/**
+ * Build a fetch wrapper that authenticates with xAI OAuth.
+ * Injects the access token (auto-refreshed by AuthStorage) as a bearer token,
+ * preserving non-auth headers from the caller.
+ */
+export declare function buildXAIOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+}): typeof fetch;
+/**
+ * Creates an xAI model using OAuth authentication.
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed).
+ */
+export declare function xaiProvider(modelId: string, options?: {
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=xai.d.ts.map

package/dist/providers/xai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.d.ts","sourceRoot":"","sources":["../../src/providers/xai.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAQxD,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAsC7F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CASnB"}

package/dist/providers/xai.js

@@ -0,0 +1,71 @@
+import { AuthStorage } from "../auth/storage.js";
+import { ProviderAuthRequiredError } from "../auth/provider-auth-error.js";
+import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
+//#region src/providers/xai.ts
+/**
+* xAI (Grok) OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with the xAI API.
+* The xAI API speaks an OpenAI-compatible chat format, and the OAuth access
+* token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`
+* into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)
+* access token.
+*/
+const XAI_PROVIDER_ID = "xai";
+const XAI_BASE_URL = "https://api.x.ai/v1";
+let authStorageInstance = null;
+/** Get or create the shared AuthStorage instance. */
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+/**
+* Build a fetch wrapper that authenticates with xAI OAuth.
+* Injects the access token (auto-refreshed by AuthStorage) as a bearer token,
+* preserving non-auth headers from the caller.
+*/
+function buildXAIOAuthFetch(opts = {}) {
+	return (async (url, init) => {
+		const storage = opts.authStorage ?? getAuthStorage();
+		storage.reload();
+		const cred = storage.get(XAI_PROVIDER_ID);
+		if (!cred || cred.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to xAI.");
+		const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);
+		if (!accessToken) throw new ProviderAuthRequiredError("Failed to refresh the xAI token.");
+		const headers = new Headers(url instanceof Request ? url.headers : void 0);
+		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
+		headers.delete("authorization");
+		headers.delete("x-api-key");
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		try {
+			return await fetch(url, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: url instanceof URL ? url.toString() : typeof url === "string" ? url : url.url });
+			throw error;
+		}
+	});
+}
+/**
+* Creates an xAI model using OAuth authentication.
+* Uses OAuth tokens from AuthStorage (auto-refreshes when needed).
+*/
+function xaiProvider(modelId, options) {
+	return createOpenAICompatible({
+		name: XAI_PROVIDER_ID,
+		baseURL: XAI_BASE_URL,
+		apiKey: "oauth-placeholder",
+		headers: options?.headers,
+		fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage })
+	}).chatModel(modelId);
+}
+//#endregion
+export { buildXAIOAuthFetch, getAuthStorage, setAuthStorage, xaiProvider };
+
+//# sourceMappingURL=xai.js.map