@mastra/code-sdk 0.0.0-esbuild-bundle-worker-20260807173433

package/dist/providers/amazon-bedrock-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock-gateway.js","names":[],"sources":["../../src/providers/amazon-bedrock-gateway.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\nimport { fromNodeProviderChain } from '@aws-sdk/credential-providers';\nimport { MastraModelGateway } from '@mastra/core/llm';\nimport type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';\nimport { getBedrockModelCatalog } from './amazon-bedrock.js';\n\ntype ModelRequestHeaders = Record<string, string>;\ntype BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;\ntype BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];\n\nconst CACHEABLE_BEDROCK_MODEL_IDS = [\n  'anthropic.claude-3-5-haiku-',\n  'anthropic.claude-3-5-sonnet-20241022-v2:0',\n  'anthropic.claude-3-7-sonnet-',\n  'anthropic.claude-fable-5',\n  'anthropic.claude-haiku-4-5-',\n  'anthropic.claude-opus-4-',\n  'anthropic.claude-sonnet-4-',\n  'anthropic.claude-sonnet-5',\n];\n\nexport function supportsBedrockPromptCaching(modelId: string): boolean {\n  return CACHEABLE_BEDROCK_MODEL_IDS.some(cacheableModelId => modelId.includes(cacheableModelId));\n}\n\nexport function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt {\n  const result = [...prompt];\n  const markCachePoint = (message: (typeof result)[number]) => ({\n    ...message,\n    providerOptions: {\n      ...message.providerOptions,\n      bedrock: {\n        ...message.providerOptions?.bedrock,\n        cachePoint: { type: 'default' },\n      },\n    },\n  });\n\n  let lastSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role === 'system') {\n      lastSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastSystemIndex >= 0) {\n    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]!);\n  }\n\n  let lastNonSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role !== 'system') {\n      lastNonSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastNonSystemIndex >= 0) {\n    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]!);\n  }\n\n  return result;\n}\n\nexport function withBedrockCache(model: BedrockModel): BedrockModel {\n  return new Proxy(model, {\n    get(target, property, receiver) {\n      if (property === 'doGenerate') {\n        return (options: Parameters<BedrockModel['doGenerate']>[0]) =>\n          target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      if (property === 'doStream') {\n        return (options: Parameters<BedrockModel['doStream']>[0]) =>\n          target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n\nexport const AMAZON_BEDROCK_GATEWAY_ID = 'amazon-bedrock';\n\n/**\n * Whether AWS credentials look available for Bedrock.\n *\n * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so\n * this only governs whether Bedrock models are offered as \"authenticated\" in the\n * picker. We look for the common signals (env vars, bearer token, a configured\n * profile, or a shared credentials/config file) rather than resolving\n * credentials here, since the auth checker must stay sync.\n */\nexport function hasAwsCredentials(): boolean {\n  if (\n    process.env.AWS_BEARER_TOKEN_BEDROCK ||\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    process.env.AWS_SHARED_CREDENTIALS_FILE ||\n    process.env.AWS_CONFIG_FILE ||\n    process.env.AWS_PROFILE ||\n    process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ||\n    process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI ||\n    process.env.AWS_WEB_IDENTITY_TOKEN_FILE\n  ) {\n    return true;\n  }\n  const home = process.env.HOME || process.env.USERPROFILE;\n  if (home) {\n    const awsDir = path.join(home, '.aws');\n    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, 'credentials');\n    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, 'config');\n    if (existsSync(credentialsPath) || existsSync(configPath)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Create an Amazon Bedrock model.\n *\n * Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this\n * resolves credentials through the standard AWS provider chain\n * (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and\n * SSO profiles, and container/instance roles — the same resolution order the AWS\n * CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.\n *\n * When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer\n * auth instead and ignores the credential provider, so we leave that path to the\n * SDK and only wire up SigV4 here.\n */\nfunction bedrockProvider(modelId: string, headers?: ModelRequestHeaders) {\n  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1';\n  const bedrock = createAmazonBedrock({\n    region,\n    credentialProvider: fromNodeProviderChain(),\n    headers,\n  });\n  const model = bedrock(modelId);\n  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;\n}\n\n/**\n * Standalone Amazon Bedrock gateway.\n *\n * Bedrock is resolved directly via AWS SigV4 (not through the model router) and\n * its models are surfaced from the public models.dev catalog. It is exposed as\n * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the\n * MastraCode gateway namespace.\n */\nexport class AmazonBedrockGateway extends MastraModelGateway {\n  readonly id = AMAZON_BEDROCK_GATEWAY_ID;\n  readonly name = 'Amazon Bedrock';\n\n  shouldEnable(): boolean {\n    return hasAwsCredentials();\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    try {\n      const bedrockModels = await getBedrockModelCatalog();\n      providers['amazon-bedrock'] = {\n        name: 'Amazon Bedrock',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: bedrockModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load Amazon Bedrock model catalog:', error);\n    }\n    return providers;\n  }\n\n  buildUrl(_modelId: string): string | undefined {\n    return undefined;\n  }\n\n  async getApiKey(_modelId: string): Promise<string> {\n    return hasAwsCredentials() ? 'aws-credential-chain' : '';\n  }\n\n  resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    // Amazon Bedrock authenticates via the AWS credential chain rather than a\n    // stored API key, so report it as authenticated whenever AWS credentials look\n    // available. The actual SigV4 signing happens inside `bedrockProvider()`.\n    if (hasAwsCredentials()) {\n      return { apiKey: 'aws-credential-chain', source: 'gateway' };\n    }\n    return undefined;\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    return bedrockProvider(args.modelId, args.headers) as unknown as GatewayLanguageModel;\n  }\n}\n\nexport function createAmazonBedrockGateway(): AmazonBedrockGateway {\n  return new AmazonBedrockGateway();\n}\n"],"mappings":";;;;;;;AAYA,MAAM,8BAA8B;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,6BAA6B,SAA0B;CACrE,OAAO,4BAA4B,MAAK,qBAAoB,QAAQ,SAAS,gBAAgB,CAAC;AAChG;AAEA,SAAgB,sBAAsB,QAAsC;CAC1E,MAAM,SAAS,CAAC,GAAG,MAAM;CACzB,MAAM,kBAAkB,aAAsC;EAC5D,GAAG;EACH,iBAAiB;GACf,GAAG,QAAQ;GACX,SAAS;IACP,GAAG,QAAQ,iBAAiB;IAC5B,YAAY,EAAE,MAAM,UAAU;GAChC;EACF;CACF;CAEA,IAAI,kBAAkB;CACtB,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAC9C,IAAI,OAAO,MAAM,CAAE,SAAS,UAAU;EACpC,kBAAkB;EAClB;CACF;CAGF,IAAI,mBAAmB,GACrB,OAAO,mBAAmB,eAAe,OAAO,gBAAiB;CAGnE,IAAI,qBAAqB;CACzB,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAC9C,IAAI,OAAO,MAAM,CAAE,SAAS,UAAU;EACpC,qBAAqB;EACrB;CACF;CAGF,IAAI,sBAAsB,GACxB,OAAO,sBAAsB,eAAe,OAAO,mBAAoB;CAGzE,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAmC;CAClE,OAAO,IAAI,MAAM,OAAO,EACtB,IAAI,QAAQ,UAAU,UAAU;EAC9B,IAAI,aAAa,cACf,QAAQ,YACN,OAAO,WAAW;GAAE,GAAG;GAAS,QAAQ,sBAAsB,QAAQ,MAAM;EAAE,CAAC;EAEnF,IAAI,aAAa,YACf,QAAQ,YACN,OAAO,SAAS;GAAE,GAAG;GAAS,QAAQ,sBAAsB,QAAQ,MAAM;EAAE,CAAC;EAEjF,OAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;CAC/C,EACF,CAAC;AACH;AAEA,MAAa,4BAA4B;;;;;;;;;;AAWzC,SAAgB,oBAA6B;CAC3C,IACE,QAAQ,IAAI,4BACX,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,IAAI,+BACZ,QAAQ,IAAI,mBACZ,QAAQ,IAAI,eACZ,QAAQ,IAAI,0CACZ,QAAQ,IAAI,sCACZ,QAAQ,IAAI,6BAEZ,OAAO;CAET,MAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI;CAC7C,IAAI,MAAM;EACR,MAAM,SAAS,KAAK,KAAK,MAAM,MAAM;EACrC,MAAM,kBAAkB,QAAQ,IAAI,+BAA+B,KAAK,KAAK,QAAQ,aAAa;EAClG,MAAM,aAAa,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,QAAQ;EAC5E,IAAI,WAAW,eAAe,KAAK,WAAW,UAAU,GACtD,OAAO;CAEX;CACA,OAAO;AACT;;;;;;;;;;;;;;AAeA,SAAS,gBAAgB,SAAiB,SAA+B;CAOvE,MAAM,QALU,oBAAoB;EAClC,QAFa,QAAQ,IAAI,cAAc,QAAQ,IAAI,sBAAsB;EAGzE,oBAAoB,sBAAsB;EAC1C;CACF,CACoB,CAAC,CAAC,OAAO;CAC7B,OAAO,6BAA6B,OAAO,IAAI,iBAAiB,KAAK,IAAI;AAC3E;;;;;;;;;AAUA,IAAa,uBAAb,cAA0C,mBAAmB;CAC3D,KAAc;CACd,OAAgB;CAEhB,eAAwB;EACtB,OAAO,kBAAkB;CAC3B;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB;GACnD,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EACA,OAAO;CACT;CAEA,SAAS,UAAsC,CAE/C;CAEA,MAAM,UAAU,UAAmC;EACjD,OAAO,kBAAkB,IAAI,yBAAyB;CACxD;CAEA,YAAY,UAA6D;EAIvE,IAAI,kBAAkB,GACpB,OAAO;GAAE,QAAQ;GAAwB,QAAQ;EAAU;CAG/D;CAEA,qBAAqB,MAOI;EACvB,OAAO,gBAAgB,KAAK,SAAS,KAAK,OAAO;CACnD;AACF;AAEA,SAAgB,6BAAmD;CACjE,OAAO,IAAI,qBAAqB;AAClC"}

package/dist/providers/amazon-bedrock.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Amazon Bedrock model catalog.
+ *
+ * Bedrock is not part of mastracode's gateway-synced model router (it
+ * authenticates with AWS SigV4 rather than an API key / base URL, so it is
+ * resolved directly in `agents/model.ts`). To still offer Bedrock models in the
+ * `/models` picker and packs, we fetch the public models.dev catalog — the same
+ * source the model router uses — and expose the `amazon-bedrock` provider's
+ * model list. This mirrors the GitHub Copilot catalog approach.
+ */
+export interface BedrockModelEntry {
+    id: string;
+}
+/** Reset the in-process Bedrock catalog cache (test seam). */
+export declare function clearBedrockCatalogCache(): void;
+/**
+ * Return the available Amazon Bedrock models.
+ *
+ * - Returns the cached list when a recent fetch succeeded.
+ * - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and
+ *   caches it for an hour.
+ * - On fetch failure, returns a small hard-coded fallback (so packs still work
+ *   offline) and caches that briefly to avoid hammering the network.
+ *
+ * Concurrent calls during a fetch share the inflight promise.
+ */
+export declare function getBedrockModelCatalog(): Promise<BedrockModelEntry[]>;
+//# sourceMappingURL=amazon-bedrock.d.ts.map

package/dist/providers/amazon-bedrock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock.d.ts","sourceRoot":"","sources":["../../src/providers/amazon-bedrock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;CACZ;AAsBD,8DAA8D;AAC9D,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAeD;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAiC3E"}

package/dist/providers/amazon-bedrock.js

@@ -0,0 +1,83 @@
+//#region src/providers/amazon-bedrock.ts
+/**
+* Amazon Bedrock model catalog.
+*
+* Bedrock is not part of mastracode's gateway-synced model router (it
+* authenticates with AWS SigV4 rather than an API key / base URL, so it is
+* resolved directly in `agents/model.ts`). To still offer Bedrock models in the
+* `/models` picker and packs, we fetch the public models.dev catalog — the same
+* source the model router uses — and expose the `amazon-bedrock` provider's
+* model list. This mirrors the GitHub Copilot catalog approach.
+*/
+const MODELS_DEV_API_URL = "https://models.dev/api.json";
+const BEDROCK_PROVIDER_ID = "amazon-bedrock";
+const CATALOG_TTL_MS = 3600 * 1e3;
+const CATALOG_FAILURE_TTL_MS = 60 * 1e3;
+const CATALOG_FETCH_TIMEOUT_MS = 5e3;
+/**
+* A small, stable fallback so Bedrock packs keep working offline or when
+* models.dev is unreachable. Intentionally minimal — the live catalog is the
+* source of truth and supersedes this within one fetch.
+*/
+const BEDROCK_FALLBACK_MODELS = [
+	{ id: "us.anthropic.claude-opus-4-6-v1" },
+	{ id: "us.anthropic.claude-sonnet-4-5-20250929-v1:0" },
+	{ id: "us.anthropic.claude-haiku-4-5-20251001-v1:0" }
+];
+let catalogCache = null;
+let inflightFetch = null;
+/** Reset the in-process Bedrock catalog cache (test seam). */
+function clearBedrockCatalogCache() {
+	catalogCache = null;
+	inflightFetch = null;
+}
+async function fetchBedrockModels(signal) {
+	const response = await fetch(MODELS_DEV_API_URL, { signal });
+	if (!response.ok) throw new Error(`models.dev returned ${response.status}`);
+	const models = (await response.json())[BEDROCK_PROVIDER_ID]?.models ?? {};
+	return Object.keys(models).sort().map((id) => ({ id }));
+}
+/**
+* Return the available Amazon Bedrock models.
+*
+* - Returns the cached list when a recent fetch succeeded.
+* - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and
+*   caches it for an hour.
+* - On fetch failure, returns a small hard-coded fallback (so packs still work
+*   offline) and caches that briefly to avoid hammering the network.
+*
+* Concurrent calls during a fetch share the inflight promise.
+*/
+async function getBedrockModelCatalog() {
+	if (catalogCache && Date.now() - catalogCache.fetchedAt < catalogCache.ttl) return catalogCache.models;
+	if (inflightFetch) return inflightFetch;
+	inflightFetch = (async () => {
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);
+		try {
+			const models = await fetchBedrockModels(controller.signal);
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_TTL_MS,
+				models
+			};
+			return models;
+		} catch (error) {
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_FAILURE_TTL_MS,
+				models: BEDROCK_FALLBACK_MODELS
+			};
+			console.warn("Failed to fetch live Amazon Bedrock models, using fallback list:", error instanceof Error ? error.message : error);
+			return BEDROCK_FALLBACK_MODELS;
+		} finally {
+			clearTimeout(timer);
+			inflightFetch = null;
+		}
+	})();
+	return inflightFetch;
+}
+//#endregion
+export { clearBedrockCatalogCache, getBedrockModelCatalog };
+
+//# sourceMappingURL=amazon-bedrock.js.map

package/dist/providers/amazon-bedrock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amazon-bedrock.js","names":[],"sources":["../../src/providers/amazon-bedrock.ts"],"sourcesContent":["/**\n * Amazon Bedrock model catalog.\n *\n * Bedrock is not part of mastracode's gateway-synced model router (it\n * authenticates with AWS SigV4 rather than an API key / base URL, so it is\n * resolved directly in `agents/model.ts`). To still offer Bedrock models in the\n * `/models` picker and packs, we fetch the public models.dev catalog — the same\n * source the model router uses — and expose the `amazon-bedrock` provider's\n * model list. This mirrors the GitHub Copilot catalog approach.\n */\n\nconst MODELS_DEV_API_URL = 'https://models.dev/api.json';\nconst BEDROCK_PROVIDER_ID = 'amazon-bedrock';\n\nconst CATALOG_TTL_MS = 60 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\nexport interface BedrockModelEntry {\n  id: string;\n}\n\n/**\n * A small, stable fallback so Bedrock packs keep working offline or when\n * models.dev is unreachable. Intentionally minimal — the live catalog is the\n * source of truth and supersedes this within one fetch.\n */\nconst BEDROCK_FALLBACK_MODELS: BedrockModelEntry[] = [\n  { id: 'us.anthropic.claude-opus-4-6-v1' },\n  { id: 'us.anthropic.claude-sonnet-4-5-20250929-v1:0' },\n  { id: 'us.anthropic.claude-haiku-4-5-20251001-v1:0' },\n];\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: BedrockModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<BedrockModelEntry[]> | null = null;\n\n/** Reset the in-process Bedrock catalog cache (test seam). */\nexport function clearBedrockCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\nasync function fetchBedrockModels(signal: AbortSignal): Promise<BedrockModelEntry[]> {\n  const response = await fetch(MODELS_DEV_API_URL, { signal });\n  if (!response.ok) {\n    throw new Error(`models.dev returned ${response.status}`);\n  }\n  const data = (await response.json()) as Record<string, { models?: Record<string, unknown> }>;\n  const provider = data[BEDROCK_PROVIDER_ID];\n  const models = provider?.models ?? {};\n  return Object.keys(models)\n    .sort()\n    .map(id => ({ id }));\n}\n\n/**\n * Return the available Amazon Bedrock models.\n *\n * - Returns the cached list when a recent fetch succeeded.\n * - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and\n *   caches it for an hour.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that briefly to avoid hammering the network.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getBedrockModelCatalog(): Promise<BedrockModelEntry[]> {\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<BedrockModelEntry[]> => {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n    try {\n      const models = await fetchBedrockModels(controller.signal);\n      catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n      return models;\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: BEDROCK_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live Amazon Bedrock models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return BEDROCK_FALLBACK_MODELS;\n    } finally {\n      clearTimeout(timer);\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,iBAAiB,OAAU;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;;;;;;AAWjC,MAAM,0BAA+C;CACnD,EAAE,IAAI,kCAAkC;CACxC,EAAE,IAAI,+CAA+C;CACrD,EAAE,IAAI,8CAA8C;AACtD;AAQA,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;;AAGzD,SAAgB,2BAAiC;CAC/C,eAAe;CACf,gBAAgB;AAClB;AAEA,eAAe,mBAAmB,QAAmD;CACnF,MAAM,WAAW,MAAM,MAAM,oBAAoB,EAAE,OAAO,CAAC;CAC3D,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,uBAAuB,SAAS,QAAQ;CAI1D,MAAM,UADW,MADG,SAAS,KAAK,EAAA,CACZ,oBACC,EAAE,UAAU,CAAC;CACpC,OAAO,OAAO,KAAK,MAAM,CAAC,CACvB,KAAK,CAAC,CACN,KAAI,QAAO,EAAE,GAAG,EAAE;AACvB;;;;;;;;;;;;AAaA,eAAsB,yBAAuD;CAE3E,IAAI,gBADQ,KAAK,IACK,IAAI,aAAa,YAAY,aAAa,KAC9D,OAAO,aAAa;CAGtB,IAAI,eAAe,OAAO;CAE1B,iBAAiB,YAA0C;EACzD,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,wBAAwB;EAC3E,IAAI;GACF,MAAM,SAAS,MAAM,mBAAmB,WAAW,MAAM;GACzD,eAAe;IAAE,WAAW,KAAK,IAAI;IAAG,KAAK;IAAgB;GAAO;GACpE,OAAO;EACT,SAAS,OAAO;GACd,eAAe;IACb,WAAW,KAAK,IAAI;IACpB,KAAK;IACL,QAAQ;GACV;GACA,QAAQ,KACN,oEACA,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;GACA,OAAO;EACT,UAAU;GACR,aAAa,KAAK;GAClB,gBAAgB;EAClB;CACF,EAAA,CAAG;CAEH,OAAO;AACT"}

package/dist/providers/claude-max.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Claude Max OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.
+ * The OAuth endpoint requires a specific system message to be present.
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import type { LanguageModelMiddleware } from 'ai';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+/**
+ * Get or create the shared AuthStorage instance
+ */
+export declare function getAuthStorage(): AuthStorage;
+/**
+ * Set a custom AuthStorage instance (useful for TUI integration)
+ */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/**
+ * Middleware that injects the Claude Code identity system message
+ * Required for Claude Max OAuth authentication
+ */
+export declare const claudeCodeMiddleware: LanguageModelMiddleware;
+/**
+ * Prompt caching middleware for Anthropic
+ *
+ * Adds cache breakpoints at strategic locations:
+ * 1. Last system message (end of static instructions + dynamic memory)
+ * 2. Most recent user/assistant message (conversation context)
+ *
+ * This allows Anthropic to cache:
+ * - System prompts and instructions (rarely change)
+ * - Conversation history up to the last message
+ */
+export declare const promptCacheMiddleware: LanguageModelMiddleware;
+/**
+ * Build a fetch function that handles Anthropic OAuth.
+ * Preserves non-auth headers from init (critical for gateway auth header to survive
+ * when used with the gateway). Strips `authorization` and `x-api-key`.
+ */
+export declare function buildAnthropicOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+}): typeof fetch;
+/**
+ * Creates an Anthropic model using Claude Max OAuth authentication
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+ */
+export declare function opencodeClaudeMaxProvider(modelId?: string, options?: {
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=claude-max.d.ts.map

package/dist/providers/claude-max.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-max.d.ts","sourceRoot":"","sources":["../../src/providers/claude-max.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAoBxD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,uBAkBlC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,uBA2DnC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAmDnG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,MAAmC,EAC5C,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CA0BnB"}

package/dist/providers/claude-max.js

@@ -0,0 +1,171 @@
+import { AuthStorage } from "../auth/storage.js";
+import { wrapLanguageModel } from "ai";
+import { createAnthropic } from "@ai-sdk/anthropic";
+//#region src/providers/claude-max.ts
+/**
+* Claude Max OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.
+* The OAuth endpoint requires a specific system message to be present.
+*/
+const claudeCodeIdentity = "You are Claude Code, Anthropic's official CLI for Claude.";
+const OAUTH_REQUIRED_BETAS = [
+	"oauth-2025-04-20",
+	"claude-code-20250219",
+	"interleaved-thinking-2025-05-14",
+	"fine-grained-tool-streaming-2025-05-14"
+];
+let authStorageInstance = null;
+/**
+* Get or create the shared AuthStorage instance
+*/
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+/**
+* Set a custom AuthStorage instance (useful for TUI integration)
+*/
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+/**
+* Middleware that injects the Claude Code identity system message
+* Required for Claude Max OAuth authentication
+*/
+const claudeCodeMiddleware = {
+	specificationVersion: "v3",
+	transformParams: async ({ params }) => {
+		const systemMessage = {
+			role: "system",
+			content: claudeCodeIdentity
+		};
+		if (params.temperature) delete params.topP;
+		return {
+			...params,
+			prompt: [systemMessage, ...params.prompt]
+		};
+	}
+};
+/**
+* Prompt caching middleware for Anthropic
+*
+* Adds cache breakpoints at strategic locations:
+* 1. Last system message (end of static instructions + dynamic memory)
+* 2. Most recent user/assistant message (conversation context)
+*
+* This allows Anthropic to cache:
+* - System prompts and instructions (rarely change)
+* - Conversation history up to the last message
+*/
+const promptCacheMiddleware = {
+	specificationVersion: "v3",
+	transformParams: async ({ params }) => {
+		const prompt = [...params.prompt];
+		const cacheControl = {
+			type: "ephemeral",
+			ttl: "5m"
+		};
+		const addCacheToMessage = (msg) => {
+			if (typeof msg.content === "string") return {
+				...msg,
+				providerOptions: {
+					...msg.providerOptions,
+					anthropic: {
+						...msg.providerOptions?.anthropic,
+						cacheControl
+					}
+				}
+			};
+			if (Array.isArray(msg.content) && msg.content.length > 0) {
+				const content = [...msg.content];
+				const lastPart = content[content.length - 1];
+				content[content.length - 1] = {
+					...lastPart,
+					providerOptions: {
+						...lastPart.providerOptions,
+						anthropic: {
+							...lastPart.providerOptions?.anthropic,
+							cacheControl
+						}
+					}
+				};
+				return {
+					...msg,
+					content
+				};
+			}
+			return msg;
+		};
+		let lastSystemIdx = -1;
+		for (let i = prompt.length - 1; i >= 0; i--) if (prompt[i].role === "system") {
+			lastSystemIdx = i;
+			break;
+		}
+		if (lastSystemIdx >= 0) prompt[lastSystemIdx] = addCacheToMessage(prompt[lastSystemIdx]);
+		const lastIdx = prompt.length - 1;
+		if (lastIdx >= 0 && lastIdx !== lastSystemIdx) prompt[lastIdx] = addCacheToMessage(prompt[lastIdx]);
+		return {
+			...params,
+			prompt
+		};
+	}
+};
+/**
+* Build a fetch function that handles Anthropic OAuth.
+* Preserves non-auth headers from init (critical for gateway auth header to survive
+* when used with the gateway). Strips `authorization` and `x-api-key`.
+*/
+function buildAnthropicOAuthFetch(opts = {}) {
+	return (async (url, init) => {
+		const storage = opts.authStorage ?? getAuthStorage();
+		storage.reload();
+		if (storage.get("anthropic")?.type === "api_key") throw new Error("Anthropic API key credential is configured, but OAuth is required.");
+		const accessToken = await storage.getApiKey("anthropic");
+		if (!accessToken) throw new Error("Not logged in to Anthropic. Run /login first.");
+		const headers = new Headers();
+		if (init?.headers) (init.headers instanceof Headers ? init.headers : Array.isArray(init.headers) ? new Headers(init.headers) : new Headers(init.headers)).forEach((value, key) => {
+			const lower = key.toLowerCase();
+			if (lower !== "authorization" && lower !== "x-api-key") headers.set(key, value);
+		});
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		const requestBetas = (headers.get("anthropic-beta") ?? "").split(",").map((beta) => beta.trim()).filter(Boolean);
+		headers.set("anthropic-beta", Array.from(/* @__PURE__ */ new Set([...OAUTH_REQUIRED_BETAS, ...requestBetas])).join(","));
+		headers.set("anthropic-version", "2023-06-01");
+		try {
+			return await fetch(url, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: url instanceof URL ? url.toString() : typeof url === "string" ? url : url.url });
+			throw error;
+		}
+	});
+}
+/**
+* Creates an Anthropic model using Claude Max OAuth authentication
+* Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+*/
+function opencodeClaudeMaxProvider(modelId = "claude-sonnet-4-20250514", options) {
+	const headers = options?.headers;
+	if (process.env.NODE_ENV === "test" || process.env.VITEST) return wrapLanguageModel({
+		model: createAnthropic({
+			apiKey: "test-api-key",
+			headers
+		})(modelId),
+		middleware: [claudeCodeMiddleware, promptCacheMiddleware]
+	});
+	return wrapLanguageModel({
+		model: createAnthropic({
+			apiKey: "oauth-placeholder",
+			headers,
+			fetch: buildAnthropicOAuthFetch({ authStorage: options?.authStorage })
+		})(modelId),
+		middleware: [claudeCodeMiddleware, promptCacheMiddleware]
+	});
+}
+//#endregion
+export { buildAnthropicOAuthFetch, claudeCodeMiddleware, getAuthStorage, opencodeClaudeMaxProvider, promptCacheMiddleware, setAuthStorage };
+
+//# sourceMappingURL=claude-max.js.map

package/dist/providers/claude-max.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-max.js","names":[],"sources":["../../src/providers/claude-max.ts"],"sourcesContent":["/**\n * Claude Max OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.\n * The OAuth endpoint requires a specific system message to be present.\n */\n\nimport { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\n// Required for Claude Max plan OAuth - the endpoint checks for this system message\nconst claudeCodeIdentity = \"You are Claude Code, Anthropic's official CLI for Claude.\";\n\n// Betas required for Claude Max plan OAuth. Merged with (not replacing) any\n// betas the AI SDK already set on the request — e.g. the SDK adds\n// `server-side-fallback-2026-06-01` when `providerOptions.anthropic.fallbacks`\n// is configured; dropping it makes the API reject the `fallbacks` body field\n// with \"Extra inputs are not permitted\".\nconst OAUTH_REQUIRED_BETAS = [\n  'oauth-2025-04-20',\n  'claude-code-20250219',\n  'interleaved-thinking-2025-05-14',\n  'fine-grained-tool-streaming-2025-05-14',\n];\n\n// Singleton auth storage instance\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Middleware that injects the Claude Code identity system message\n * Required for Claude Max OAuth authentication\n */\nexport const claudeCodeMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    // Prepend the Claude Code identity as the first system message\n    const systemMessage = {\n      role: 'system' as const,\n      content: claudeCodeIdentity,\n    };\n\n    if (params.temperature) {\n      delete params.topP;\n    }\n\n    return {\n      ...params,\n      prompt: [systemMessage, ...params.prompt],\n    };\n  },\n};\n\n/**\n * Prompt caching middleware for Anthropic\n *\n * Adds cache breakpoints at strategic locations:\n * 1. Last system message (end of static instructions + dynamic memory)\n * 2. Most recent user/assistant message (conversation context)\n *\n * This allows Anthropic to cache:\n * - System prompts and instructions (rarely change)\n * - Conversation history up to the last message\n */\nexport const promptCacheMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    const prompt = [...params.prompt];\n\n    const cacheControl = { type: 'ephemeral' as const, ttl: '5m' as const };\n\n    // Helper to add cache control to a message's last content part\n    const addCacheToMessage = (msg: any) => {\n      // For system messages with string content\n      if (typeof msg.content === 'string') {\n        return {\n          ...msg,\n          providerOptions: {\n            ...msg.providerOptions,\n            anthropic: { ...msg.providerOptions?.anthropic, cacheControl },\n          },\n        };\n      }\n\n      // For messages with array content, add to last part\n      if (Array.isArray(msg.content) && msg.content.length > 0) {\n        const content = [...msg.content];\n        const lastPart = content[content.length - 1];\n        content[content.length - 1] = {\n          ...lastPart,\n          providerOptions: {\n            ...lastPart.providerOptions,\n            anthropic: { ...lastPart.providerOptions?.anthropic, cacheControl },\n          },\n        };\n        return { ...msg, content };\n      }\n\n      return msg;\n    };\n\n    // Find the last system message index\n    let lastSystemIdx = -1;\n    for (let i = prompt.length - 1; i >= 0; i--) {\n      if ((prompt[i] as any).role === 'system') {\n        lastSystemIdx = i;\n        break;\n      }\n    }\n\n    // Add cache breakpoint to last system message\n    if (lastSystemIdx >= 0) {\n      prompt[lastSystemIdx] = addCacheToMessage(prompt[lastSystemIdx]);\n    }\n\n    // Add cache breakpoint to the most recent message (last in array)\n    const lastIdx = prompt.length - 1;\n    if (lastIdx >= 0 && lastIdx !== lastSystemIdx) {\n      prompt[lastIdx] = addCacheToMessage(prompt[lastIdx]);\n    }\n\n    return { ...params, prompt };\n  },\n};\n\n/**\n * Build a fetch function that handles Anthropic OAuth.\n * Preserves non-auth headers from init (critical for gateway auth header to survive\n * when used with the gateway). Strips `authorization` and `x-api-key`.\n */\nexport function buildAnthropicOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const storedCred = storage.get('anthropic');\n    if (storedCred?.type === 'api_key') {\n      throw new Error('Anthropic API key credential is configured, but OAuth is required.');\n    }\n\n    const accessToken = await storage.getApiKey('anthropic');\n    if (!accessToken) {\n      throw new Error('Not logged in to Anthropic. Run /login first.');\n    }\n\n    // Preserve existing headers, strip auth-related ones\n    const headers = new Headers();\n    if (init?.headers) {\n      const source =\n        init.headers instanceof Headers\n          ? init.headers\n          : Array.isArray(init.headers)\n            ? new Headers(init.headers as Array<[string, string]>)\n            : new Headers(init.headers as Record<string, string>);\n      source.forEach((value, key) => {\n        const lower = key.toLowerCase();\n        if (lower !== 'authorization' && lower !== 'x-api-key') {\n          headers.set(key, value);\n        }\n      });\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    const requestBetas = (headers.get('anthropic-beta') ?? '')\n      .split(',')\n      .map(beta => beta.trim())\n      .filter(Boolean);\n    headers.set('anthropic-beta', Array.from(new Set([...OAUTH_REQUIRED_BETAS, ...requestBetas])).join(','));\n    headers.set('anthropic-version', '2023-06-01');\n\n    try {\n      return await fetch(url, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: url instanceof URL ? url.toString() : typeof url === 'string' ? url : url.url,\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an Anthropic model using Claude Max OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n */\nexport function opencodeClaudeMaxProvider(\n  modelId: string = 'claude-sonnet-4-20250514',\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const headers = options?.headers;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const anthropic = createAnthropic({\n      apiKey: 'test-api-key',\n      headers,\n    });\n    return wrapLanguageModel({\n      model: anthropic(modelId),\n      middleware: [claudeCodeMiddleware, promptCacheMiddleware],\n    });\n  }\n\n  const anthropic = createAnthropic({\n    apiKey: 'oauth-placeholder',\n    headers,\n    fetch: buildAnthropicOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Wrap with middleware to inject Claude Code identity and enable prompt caching\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [claudeCodeMiddleware, promptCacheMiddleware],\n  });\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAM,qBAAqB;AAO3B,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;AACF;AAGA,IAAI,sBAA0C;;;;AAK9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;AAMA,MAAa,uBAAgD;CAC3D,sBAAsB;CACtB,iBAAiB,OAAO,EAAE,aAAa;EAErC,MAAM,gBAAgB;GACpB,MAAM;GACN,SAAS;EACX;EAEA,IAAI,OAAO,aACT,OAAO,OAAO;EAGhB,OAAO;GACL,GAAG;GACH,QAAQ,CAAC,eAAe,GAAG,OAAO,MAAM;EAC1C;CACF;AACF;;;;;;;;;;;;AAaA,MAAa,wBAAiD;CAC5D,sBAAsB;CACtB,iBAAiB,OAAO,EAAE,aAAa;EACrC,MAAM,SAAS,CAAC,GAAG,OAAO,MAAM;EAEhC,MAAM,eAAe;GAAE,MAAM;GAAsB,KAAK;EAAc;EAGtE,MAAM,qBAAqB,QAAa;GAEtC,IAAI,OAAO,IAAI,YAAY,UACzB,OAAO;IACL,GAAG;IACH,iBAAiB;KACf,GAAG,IAAI;KACP,WAAW;MAAE,GAAG,IAAI,iBAAiB;MAAW;KAAa;IAC/D;GACF;GAIF,IAAI,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,SAAS,GAAG;IACxD,MAAM,UAAU,CAAC,GAAG,IAAI,OAAO;IAC/B,MAAM,WAAW,QAAQ,QAAQ,SAAS;IAC1C,QAAQ,QAAQ,SAAS,KAAK;KAC5B,GAAG;KACH,iBAAiB;MACf,GAAG,SAAS;MACZ,WAAW;OAAE,GAAG,SAAS,iBAAiB;OAAW;MAAa;KACpE;IACF;IACA,OAAO;KAAE,GAAG;KAAK;IAAQ;GAC3B;GAEA,OAAO;EACT;EAGA,IAAI,gBAAgB;EACpB,KAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KACtC,IAAK,OAAO,EAAE,CAAS,SAAS,UAAU;GACxC,gBAAgB;GAChB;EACF;EAIF,IAAI,iBAAiB,GACnB,OAAO,iBAAiB,kBAAkB,OAAO,cAAc;EAIjE,MAAM,UAAU,OAAO,SAAS;EAChC,IAAI,WAAW,KAAK,YAAY,eAC9B,OAAO,WAAW,kBAAkB,OAAO,QAAQ;EAGrD,OAAO;GAAE,GAAG;GAAQ;EAAO;CAC7B;AACF;;;;;;AAOA,SAAgB,yBAAyB,OAA0C,CAAC,GAAiB;CACnG,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAGf,IADmB,QAAQ,IAAI,WAClB,CAAC,EAAE,SAAS,WACvB,MAAM,IAAI,MAAM,oEAAoE;EAGtF,MAAM,cAAc,MAAM,QAAQ,UAAU,WAAW;EACvD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,+CAA+C;EAIjE,MAAM,UAAU,IAAI,QAAQ;EAC5B,IAAI,MAAM,SAOR,CALE,KAAK,mBAAmB,UACpB,KAAK,UACL,MAAM,QAAQ,KAAK,OAAO,IACxB,IAAI,QAAQ,KAAK,OAAkC,IACnD,IAAI,QAAQ,KAAK,OAAiC,EAAA,CACnD,SAAS,OAAO,QAAQ;GAC7B,MAAM,QAAQ,IAAI,YAAY;GAC9B,IAAI,UAAU,mBAAmB,UAAU,aACzC,QAAQ,IAAI,KAAK,KAAK;EAE1B,CAAC;EAGH,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,MAAM,gBAAgB,QAAQ,IAAI,gBAAgB,KAAK,GAAA,CACpD,MAAM,GAAG,CAAC,CACV,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,OAAO,OAAO;EACjB,QAAQ,IAAI,kBAAkB,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAG,sBAAsB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;EACvG,QAAQ,IAAI,qBAAqB,YAAY;EAE7C,IAAI;GACF,OAAO,MAAM,MAAM,KAAK;IAAE,GAAG;IAAM;GAAQ,CAAC;EAC9C,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAM,IAAI,IACxF,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;;;AAMA,SAAgB,0BACd,UAAkB,4BAClB,SACmB;CACnB,MAAM,UAAU,SAAS;CAGzB,IAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAKjD,OAAO,kBAAkB;EACvB,OALgB,gBAAgB;GAChC,QAAQ;GACR;EACF,CAEiB,CAAC,CAAC,OAAO;EACxB,YAAY,CAAC,sBAAsB,qBAAqB;CAC1D,CAAC;CAUH,OAAO,kBAAkB;EACvB,OARgB,gBAAgB;GAChC,QAAQ;GACR;GACA,OAAO,yBAAyB,EAAE,aAAa,SAAS,YAAY,CAAC;EACvE,CAIiB,CAAC,CAAC,OAAO;EACxB,YAAY,CAAC,sBAAsB,qBAAqB;CAC1D,CAAC;AACH"}

package/dist/providers/github-copilot.d.ts

@@ -0,0 +1,60 @@
+/**
+ * GitHub Copilot OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.
+ * The Copilot API speaks an OpenAI-compatible chat format, so we plug
+ * `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject
+ * the bearer token and Copilot-specific headers.
+ *
+ * Inspired by:
+ *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts
+ *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import type { CopilotModelEntry } from '../auth/providers/github-copilot.js';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+/** Get or create the shared AuthStorage instance. */
+export declare function getAuthStorage(): AuthStorage;
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/**
+ * Build a fetch wrapper that authenticates with GitHub Copilot OAuth.
+ *
+ * - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).
+ * - Adds the VS Code-like Copilot headers required by the API.
+ * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.
+ */
+export declare function buildGitHubCopilotOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+    rewriteUrl?: boolean;
+}): typeof fetch;
+/**
+ * Creates a model that talks to GitHub Copilot using OAuth credentials.
+ *
+ * Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot
+ * is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL
+ * instead of the OpenAI provider plus URL rewriting.
+ */
+export declare function githubCopilotProvider(modelId?: string, options?: {
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */
+export declare function clearCopilotCatalogCache(): void;
+/**
+ * Return the user's currently-available Copilot models.
+ *
+ * - Returns `[]` when the user is not logged in to GitHub Copilot.
+ * - Returns the cached list when a recent fetch succeeded.
+ * - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters
+ *   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.
+ * - On fetch failure, returns a small hard-coded fallback (so packs still work
+ *   offline) and caches that for 1 minute to avoid hammering the API.
+ *
+ * Concurrent calls during a fetch share the inflight promise.
+ */
+export declare function getCopilotModelCatalog(opts?: {
+    authStorage?: AuthStorage;
+}): Promise<CopilotModelEntry[]>;
+//# sourceMappingURL=github-copilot.d.ts.map

package/dist/providers/github-copilot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-copilot.d.ts","sourceRoot":"","sources":["../../src/providers/github-copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAM1D,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOxD,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAqED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAgFd;AAwED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,MAAkB,EAC3B,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CAiBnB;AAsCD,wFAAwF;AACxF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAyDnH"}