@mastra/code-sdk 0.0.0-esbuild-bundle-worker-20260807173433

package/dist/providers/github-copilot.js

@@ -0,0 +1,265 @@
+import { COPILOT_HEADERS, fetchCopilotModels, getGitHubCopilotBaseUrl } from "../auth/providers/github-copilot.js";
+import { AuthStorage } from "../auth/storage.js";
+import { wrapLanguageModel } from "ai";
+import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
+import { GoogleSchemaCompatLayer, applyCompatLayer } from "@mastra/schema-compat";
+//#region src/providers/github-copilot.ts
+/**
+* GitHub Copilot OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.
+* The Copilot API speaks an OpenAI-compatible chat format, so we plug
+* `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject
+* the bearer token and Copilot-specific headers.
+*
+* Inspired by:
+*   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts
+*   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts
+*/
+const COPILOT_PROVIDER_ID = "github-copilot";
+let authStorageInstance = null;
+/** Get or create the shared AuthStorage instance. */
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+/**
+* Heuristic: did this request come from the agent (e.g. tool result follow-ups) rather
+* than a fresh user turn? Mirrors opencode's `isAgent` logic — Copilot bills these
+* differently via the `x-initiator` header.
+*/
+function detectIsAgent(body) {
+	if (!body || typeof body !== "object") return false;
+	const obj = body;
+	const messages = obj.messages;
+	if (Array.isArray(messages) && messages.length > 0) {
+		const last = messages[messages.length - 1];
+		if (last?.role && last.role !== "user") return true;
+		if (Array.isArray(last?.content)) {
+			if (last.content.some((part) => part && typeof part === "object" && part.type === "tool_result")) return true;
+		}
+	}
+	const input = obj.input;
+	if (Array.isArray(input) && input.length > 0) {
+		const last = input[input.length - 1];
+		if (last?.role && last.role !== "user") return true;
+	}
+	return false;
+}
+/** Detect image/vision content in a request body. */
+function detectIsVision(body) {
+	if (!body || typeof body !== "object") return false;
+	const obj = body;
+	const matchPart = (part) => {
+		if (!part || typeof part !== "object") return false;
+		const t = part.type;
+		return t === "image" || t === "image_url" || t === "input_image";
+	};
+	const messages = obj.messages;
+	if (Array.isArray(messages)) return messages.some((msg) => msg && typeof msg === "object" && Array.isArray(msg.content) && msg.content.some(matchPart));
+	const input = obj.input;
+	if (Array.isArray(input)) return input.some((item) => item && typeof item === "object" && Array.isArray(item.content) && item.content.some(matchPart));
+	return false;
+}
+/**
+* Build a fetch wrapper that authenticates with GitHub Copilot OAuth.
+*
+* - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).
+* - Adds the VS Code-like Copilot headers required by the API.
+* - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.
+*/
+function buildGitHubCopilotOAuthFetch(opts = {}) {
+	return (async (url, init) => {
+		const storage = opts.authStorage ?? getAuthStorage();
+		storage.reload();
+		const cred = storage.get(COPILOT_PROVIDER_ID);
+		if (!cred || cred.type !== "oauth") throw new Error("Not logged in to GitHub Copilot. Run /login first.");
+		const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);
+		if (!accessToken) throw new Error("Failed to refresh GitHub Copilot token. Please /login again.");
+		storage.reload();
+		const enterpriseUrl = cred.enterpriseUrl;
+		let parsedBody;
+		if (typeof init?.body === "string") try {
+			parsedBody = JSON.parse(init.body);
+		} catch {
+			parsedBody = void 0;
+		}
+		const isAgent = detectIsAgent(parsedBody);
+		const isVision = detectIsVision(parsedBody);
+		const headers = new Headers();
+		if (init?.headers) (init.headers instanceof Headers ? init.headers : Array.isArray(init.headers) ? new Headers(init.headers) : new Headers(init.headers)).forEach((value, key) => {
+			const lower = key.toLowerCase();
+			if (lower !== "authorization" && lower !== "x-api-key") headers.set(key, value);
+		});
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		headers.set("x-initiator", isAgent ? "agent" : "user");
+		headers.set("Openai-Intent", "conversation-edits");
+		if (isVision) headers.set("Copilot-Vision-Request", "true");
+		for (const [key, value] of Object.entries(COPILOT_HEADERS)) if (!headers.has(key)) headers.set(key, value);
+		const finalUrl = opts.rewriteUrl !== false ? rewriteToCopilotBase(url, accessToken, enterpriseUrl) : url instanceof URL ? url : typeof url === "string" ? new URL(url) : new URL(url.url);
+		try {
+			return await fetch(finalUrl, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: finalUrl.toString() });
+			throw error;
+		}
+	});
+}
+function rewriteToCopilotBase(url, token, enterpriseDomain) {
+	const original = url instanceof URL ? url : new URL(typeof url === "string" ? url : url.url);
+	const base = new URL(getGitHubCopilotBaseUrl(token, enterpriseDomain));
+	const pathname = original.pathname.replace(/^\/v1(\/|$)/, "/");
+	return new URL(`${pathname}${original.search}`, base);
+}
+function isGeminiModel(modelId) {
+	return modelId.startsWith("gemini-");
+}
+function applyGeminiSchemaCompatToTools(modelId, tools) {
+	if (!Array.isArray(tools)) return tools;
+	const compatLayer = new GoogleSchemaCompatLayer({
+		provider: COPILOT_PROVIDER_ID,
+		modelId,
+		supportsStructuredOutputs: false
+	});
+	return tools.map((tool) => {
+		if (!tool || typeof tool !== "object" || tool.type !== "function") return tool;
+		const functionTool = tool;
+		if (!functionTool.inputSchema) return tool;
+		return {
+			...functionTool,
+			inputSchema: applyCompatLayer({
+				schema: functionTool.inputSchema,
+				compatLayers: [compatLayer],
+				mode: "aiSdkSchema"
+			}).jsonSchema
+		};
+	});
+}
+/** Middleware that prevents sending parameters Copilot's endpoint rejects. */
+function createCopilotMiddleware(modelId) {
+	return {
+		specificationVersion: "v3",
+		transformParams: async ({ params }) => {
+			if (params.temperature !== void 0 && params.temperature !== null) delete params.topP;
+			if (isGeminiModel(modelId)) params.tools = applyGeminiSchemaCompatToTools(modelId, params.tools);
+			return params;
+		}
+	};
+}
+/**
+* Creates a model that talks to GitHub Copilot using OAuth credentials.
+*
+* Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot
+* is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL
+* instead of the OpenAI provider plus URL rewriting.
+*/
+function githubCopilotProvider(modelId = "gpt-4.1", options) {
+	const headers = options?.headers;
+	return wrapLanguageModel({
+		model: createOpenAICompatible({
+			name: COPILOT_PROVIDER_ID,
+			baseURL: "https://api.githubcopilot.com",
+			apiKey: process.env.NODE_ENV === "test" || process.env.VITEST ? "test-api-key" : "oauth-placeholder",
+			headers,
+			fetch: process.env.NODE_ENV === "test" || process.env.VITEST ? void 0 : buildGitHubCopilotOAuthFetch({
+				rewriteUrl: false,
+				authStorage: options?.authStorage
+			})
+		}).chatModel(modelId),
+		middleware: [createCopilotMiddleware(modelId)]
+	});
+}
+/**
+* Hard-coded fallback advertised when the live `/models` request fails (network
+* down, expired token, etc.). Keep this conservative because the live catalog is
+* the source of truth for the user's currently-enabled Copilot models.
+*
+* Available across all paid Copilot tiers and free of premium-request charges.
+*/
+const COPILOT_FALLBACK_MODELS = [{
+	id: "gpt-4.1",
+	name: "GPT-4.1",
+	vendor: "OpenAI",
+	supportedEndpoints: ["/chat/completions"],
+	isAnthropicShaped: false,
+	supportsVision: true,
+	supportsToolCalls: true
+}];
+const CATALOG_TTL_MS = 600 * 1e3;
+const CATALOG_FAILURE_TTL_MS = 60 * 1e3;
+const CATALOG_FETCH_TIMEOUT_MS = 5e3;
+let catalogCache = null;
+let inflightFetch = null;
+/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */
+function clearCopilotCatalogCache() {
+	catalogCache = null;
+	inflightFetch = null;
+}
+/**
+* Return the user's currently-available Copilot models.
+*
+* - Returns `[]` when the user is not logged in to GitHub Copilot.
+* - Returns the cached list when a recent fetch succeeded.
+* - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters
+*   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.
+* - On fetch failure, returns a small hard-coded fallback (so packs still work
+*   offline) and caches that for 1 minute to avoid hammering the API.
+*
+* Concurrent calls during a fetch share the inflight promise.
+*/
+async function getCopilotModelCatalog(opts = {}) {
+	const storage = opts.authStorage ?? getAuthStorage();
+	storage.reload();
+	const cred = storage.get(COPILOT_PROVIDER_ID);
+	if (!cred || cred.type !== "oauth") return [];
+	if (catalogCache && Date.now() - catalogCache.fetchedAt < catalogCache.ttl) return catalogCache.models;
+	if (inflightFetch) return inflightFetch;
+	inflightFetch = (async () => {
+		try {
+			const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);
+			if (!accessToken) throw new Error("No Copilot bearer token");
+			storage.reload();
+			const enterpriseUrl = storage.get(COPILOT_PROVIDER_ID)?.enterpriseUrl;
+			const baseUrl = getGitHubCopilotBaseUrl(accessToken, enterpriseUrl);
+			const controller = new AbortController();
+			const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);
+			try {
+				const models = await fetchCopilotModels({
+					baseUrl,
+					bearerToken: accessToken,
+					signal: controller.signal
+				});
+				catalogCache = {
+					fetchedAt: Date.now(),
+					ttl: CATALOG_TTL_MS,
+					models
+				};
+				return models;
+			} finally {
+				clearTimeout(timer);
+			}
+		} catch (error) {
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_FAILURE_TTL_MS,
+				models: COPILOT_FALLBACK_MODELS
+			};
+			console.warn("Failed to fetch live GitHub Copilot models, using fallback list:", error instanceof Error ? error.message : error);
+			return COPILOT_FALLBACK_MODELS;
+		} finally {
+			inflightFetch = null;
+		}
+	})();
+	return inflightFetch;
+}
+//#endregion
+export { buildGitHubCopilotOAuthFetch, clearCopilotCatalogCache, getAuthStorage, getCopilotModelCatalog, githubCopilotProvider, setAuthStorage };
+
+//# sourceMappingURL=github-copilot.js.map

package/dist/providers/github-copilot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-copilot.js","names":[],"sources":["../../src/providers/github-copilot.ts"],"sourcesContent":["/**\n * GitHub Copilot OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.\n * The Copilot API speaks an OpenAI-compatible chat format, so we plug\n * `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject\n * the bearer token and Copilot-specific headers.\n *\n * Inspired by:\n *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts\n *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport type { JSONSchema7 } from '@mastra/schema-compat';\nimport { applyCompatLayer, GoogleSchemaCompatLayer } from '@mastra/schema-compat';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { COPILOT_HEADERS, fetchCopilotModels, getGitHubCopilotBaseUrl } from '../auth/providers/github-copilot.js';\nimport type { CopilotModelEntry, GitHubCopilotCredentials } from '../auth/providers/github-copilot.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\nconst COPILOT_PROVIDER_ID = 'github-copilot';\n\n// Singleton auth storage instance (shared with claude-max.ts / openai-codex.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Heuristic: did this request come from the agent (e.g. tool result follow-ups) rather\n * than a fresh user turn? Mirrors opencode's `isAgent` logic — Copilot bills these\n * differently via the `x-initiator` header.\n */\nfunction detectIsAgent(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const messages = obj.messages;\n  if (Array.isArray(messages) && messages.length > 0) {\n    const last = messages[messages.length - 1] as { role?: string; content?: unknown };\n    if (last?.role && last.role !== 'user') return true;\n    if (Array.isArray(last?.content)) {\n      // If the last user turn carries any tool_result parts, treat it as an agent turn.\n      const hasToolResult = last.content.some(\n        (part: unknown) => part && typeof part === 'object' && (part as { type?: string }).type === 'tool_result',\n      );\n      if (hasToolResult) return true;\n    }\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input) && input.length > 0) {\n    const last = input[input.length - 1] as { role?: string };\n    if (last?.role && last.role !== 'user') return true;\n  }\n\n  return false;\n}\n\n/** Detect image/vision content in a request body. */\nfunction detectIsVision(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const matchPart = (part: unknown): boolean => {\n    if (!part || typeof part !== 'object') return false;\n    const t = (part as { type?: string }).type;\n    return t === 'image' || t === 'image_url' || t === 'input_image';\n  };\n\n  const messages = obj.messages;\n  if (Array.isArray(messages)) {\n    return messages.some(\n      (msg: unknown) =>\n        msg &&\n        typeof msg === 'object' &&\n        Array.isArray((msg as { content?: unknown }).content) &&\n        ((msg as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input)) {\n    return input.some(\n      (item: unknown) =>\n        item &&\n        typeof item === 'object' &&\n        Array.isArray((item as { content?: unknown }).content) &&\n        ((item as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  return false;\n}\n\n/**\n * Build a fetch wrapper that authenticates with GitHub Copilot OAuth.\n *\n * - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).\n * - Adds the VS Code-like Copilot headers required by the API.\n * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.\n */\nexport function buildGitHubCopilotOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(COPILOT_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new Error('Not logged in to GitHub Copilot. Run /login first.');\n    }\n\n    // getApiKey() refreshes the Copilot bearer if it has expired.\n    const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n    if (!accessToken) {\n      throw new Error('Failed to refresh GitHub Copilot token. Please /login again.');\n    }\n    storage.reload();\n\n    const enterpriseUrl = (cred as GitHubCopilotCredentials).enterpriseUrl;\n\n    let parsedBody: unknown;\n    if (typeof init?.body === 'string') {\n      try {\n        parsedBody = JSON.parse(init.body);\n      } catch {\n        parsedBody = undefined;\n      }\n    }\n    const isAgent = detectIsAgent(parsedBody);\n    const isVision = detectIsVision(parsedBody);\n\n    // Preserve non-auth headers from caller.\n    const headers = new Headers();\n    if (init?.headers) {\n      const source =\n        init.headers instanceof Headers\n          ? init.headers\n          : Array.isArray(init.headers)\n            ? new Headers(init.headers as Array<[string, string]>)\n            : new Headers(init.headers as Record<string, string>);\n      source.forEach((value, key) => {\n        const lower = key.toLowerCase();\n        if (lower !== 'authorization' && lower !== 'x-api-key') {\n          headers.set(key, value);\n        }\n      });\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('x-initiator', isAgent ? 'agent' : 'user');\n    headers.set('Openai-Intent', 'conversation-edits');\n    if (isVision) {\n      headers.set('Copilot-Vision-Request', 'true');\n    }\n    for (const [key, value] of Object.entries(COPILOT_HEADERS)) {\n      // Only set if caller didn't already provide it (allow overrides for tests).\n      if (!headers.has(key)) {\n        headers.set(key, value);\n      }\n    }\n\n    const finalUrl =\n      opts.rewriteUrl !== false\n        ? rewriteToCopilotBase(url, accessToken, enterpriseUrl)\n        : url instanceof URL\n          ? url\n          : typeof url === 'string'\n            ? new URL(url)\n            : new URL((url as Request).url);\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction rewriteToCopilotBase(url: string | URL | Request, token: string, enterpriseDomain?: string): URL {\n  const original = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n  const base = new URL(getGitHubCopilotBaseUrl(token, enterpriseDomain));\n  // Copilot's OpenAI-compatible API serves endpoints at the root of the base host\n  // (`/chat/completions`, `/responses`, `/models`, ...) — not under a `/v1/` prefix\n  // like api.openai.com does. The @ai-sdk/openai default baseURL is\n  // `https://api.openai.com/v1`, so the SDK builds requests like\n  // `https://api.openai.com/v1/chat/completions`. Strip the leading `/v1` segment\n  // when rewriting onto the Copilot base or Copilot will return 404 Not Found.\n  const pathname = original.pathname.replace(/^\\/v1(\\/|$)/, '/');\n  return new URL(`${pathname}${original.search}`, base);\n}\n\nfunction isGeminiModel(modelId: string): boolean {\n  return modelId.startsWith('gemini-');\n}\n\nfunction applyGeminiSchemaCompatToTools(modelId: string, tools: unknown): unknown {\n  if (!Array.isArray(tools)) {\n    return tools;\n  }\n\n  const compatLayer = new GoogleSchemaCompatLayer({\n    provider: COPILOT_PROVIDER_ID,\n    modelId,\n    supportsStructuredOutputs: false,\n  });\n\n  return tools.map(tool => {\n    if (!tool || typeof tool !== 'object' || (tool as { type?: unknown }).type !== 'function') {\n      return tool;\n    }\n\n    const functionTool = tool as { inputSchema?: JSONSchema7 };\n    if (!functionTool.inputSchema) {\n      return tool;\n    }\n\n    return {\n      ...functionTool,\n      inputSchema: applyCompatLayer({\n        schema: functionTool.inputSchema,\n        compatLayers: [compatLayer],\n        mode: 'aiSdkSchema',\n      }).jsonSchema as JSONSchema7,\n    };\n  });\n}\n\n/** Middleware that prevents sending parameters Copilot's endpoint rejects. */\nfunction createCopilotMiddleware(modelId: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      if (isGeminiModel(modelId)) {\n        (params as { tools?: unknown }).tools = applyGeminiSchemaCompatToTools(\n          modelId,\n          (params as { tools?: unknown }).tools,\n        );\n      }\n\n      return params;\n    },\n  };\n}\n\n/**\n * Creates a model that talks to GitHub Copilot using OAuth credentials.\n *\n * Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot\n * is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL\n * instead of the OpenAI provider plus URL rewriting.\n */\nexport function githubCopilotProvider(\n  modelId: string = 'gpt-4.1',\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const copilot = createOpenAICompatible({\n    name: COPILOT_PROVIDER_ID,\n    baseURL: 'https://api.githubcopilot.com',\n    apiKey: process.env.NODE_ENV === 'test' || process.env.VITEST ? 'test-api-key' : 'oauth-placeholder',\n    headers,\n    fetch:\n      process.env.NODE_ENV === 'test' || process.env.VITEST\n        ? undefined\n        : (buildGitHubCopilotOAuthFetch({ rewriteUrl: false, authStorage: options?.authStorage }) as any),\n  });\n\n  return wrapLanguageModel({\n    model: copilot.chatModel(modelId),\n    middleware: [createCopilotMiddleware(modelId)],\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live model catalog\n// ---------------------------------------------------------------------------\n\n/**\n * Hard-coded fallback advertised when the live `/models` request fails (network\n * down, expired token, etc.). Keep this conservative because the live catalog is\n * the source of truth for the user's currently-enabled Copilot models.\n *\n * Available across all paid Copilot tiers and free of premium-request charges.\n */\nconst COPILOT_FALLBACK_MODELS: CopilotModelEntry[] = [\n  {\n    id: 'gpt-4.1',\n    name: 'GPT-4.1',\n    vendor: 'OpenAI',\n    supportedEndpoints: ['/chat/completions'],\n    isAnthropicShaped: false,\n    supportsVision: true,\n    supportsToolCalls: true,\n  },\n];\n\nconst CATALOG_TTL_MS = 10 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: CopilotModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<CopilotModelEntry[]> | null = null;\n\n/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */\nexport function clearCopilotCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\n/**\n * Return the user's currently-available Copilot models.\n *\n * - Returns `[]` when the user is not logged in to GitHub Copilot.\n * - Returns the cached list when a recent fetch succeeded.\n * - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters\n *   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that for 1 minute to avoid hammering the API.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getCopilotModelCatalog(opts: { authStorage?: AuthStorage } = {}): Promise<CopilotModelEntry[]> {\n  const storage = opts.authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get(COPILOT_PROVIDER_ID);\n  if (!cred || cred.type !== 'oauth') {\n    return [];\n  }\n\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<CopilotModelEntry[]> => {\n    try {\n      // getApiKey() refreshes the Copilot bearer if it has expired.\n      const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n      if (!accessToken) throw new Error('No Copilot bearer token');\n      storage.reload();\n\n      const refreshed = storage.get(COPILOT_PROVIDER_ID);\n      const enterpriseUrl = (refreshed as GitHubCopilotCredentials | undefined)?.enterpriseUrl;\n      const baseUrl = getGitHubCopilotBaseUrl(accessToken, enterpriseUrl);\n\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n      try {\n        const models = await fetchCopilotModels({\n          baseUrl,\n          bearerToken: accessToken,\n          signal: controller.signal,\n        });\n        catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n        return models;\n      } finally {\n        clearTimeout(timer);\n      }\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: COPILOT_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live GitHub Copilot models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return COPILOT_FALLBACK_MODELS;\n    } finally {\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAM,sBAAsB;AAG5B,IAAI,sBAA0C;;AAG9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;AAGA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;;AAOA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAM;CAEZ,MAAM,WAAW,IAAI;CACrB,IAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAAG;EAClD,MAAM,OAAO,SAAS,SAAS,SAAS;EACxC,IAAI,MAAM,QAAQ,KAAK,SAAS,QAAQ,OAAO;EAC/C,IAAI,MAAM,QAAQ,MAAM,OAAO,GAEP;OAAA,KAAK,QAAQ,MAChC,SAAkB,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS,aAE9E,GAAG,OAAO;EAAA;CAE9B;CAEA,MAAM,QAAQ,IAAI;CAClB,IAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;EAC5C,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,IAAI,MAAM,QAAQ,KAAK,SAAS,QAAQ,OAAO;CACjD;CAEA,OAAO;AACT;;AAGA,SAAS,eAAe,MAAwB;CAC9C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAM;CAEZ,MAAM,aAAa,SAA2B;EAC5C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;EAC9C,MAAM,IAAK,KAA2B;EACtC,OAAO,MAAM,WAAW,MAAM,eAAe,MAAM;CACrD;CAEA,MAAM,WAAW,IAAI;CACrB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,SAAS,MACb,QACC,OACA,OAAO,QAAQ,YACf,MAAM,QAAS,IAA8B,OAAO,KAClD,IAA+B,QAAsB,KAAK,SAAS,CACzE;CAGF,MAAM,QAAQ,IAAI;CAClB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,MACV,SACC,QACA,OAAO,SAAS,YAChB,MAAM,QAAS,KAA+B,OAAO,KACnD,KAAgC,QAAsB,KAAK,SAAS,CAC1E;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,6BACd,OAAgE,CAAC,GACnD;CACd,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAEf,MAAM,OAAO,QAAQ,IAAI,mBAAmB;EAC5C,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,MAAM,oDAAoD;EAItE,MAAM,cAAc,MAAM,QAAQ,UAAU,mBAAmB;EAC/D,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,8DAA8D;EAEhF,QAAQ,OAAO;EAEf,MAAM,gBAAiB,KAAkC;EAEzD,IAAI;EACJ,IAAI,OAAO,MAAM,SAAS,UACxB,IAAI;GACF,aAAa,KAAK,MAAM,KAAK,IAAI;EACnC,QAAQ;GACN,aAAa,KAAA;EACf;EAEF,MAAM,UAAU,cAAc,UAAU;EACxC,MAAM,WAAW,eAAe,UAAU;EAG1C,MAAM,UAAU,IAAI,QAAQ;EAC5B,IAAI,MAAM,SAOR,CALE,KAAK,mBAAmB,UACpB,KAAK,UACL,MAAM,QAAQ,KAAK,OAAO,IACxB,IAAI,QAAQ,KAAK,OAAkC,IACnD,IAAI,QAAQ,KAAK,OAAiC,EAAA,CACnD,SAAS,OAAO,QAAQ;GAC7B,MAAM,QAAQ,IAAI,YAAY;GAC9B,IAAI,UAAU,mBAAmB,UAAU,aACzC,QAAQ,IAAI,KAAK,KAAK;EAE1B,CAAC;EAGH,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,QAAQ,IAAI,eAAe,UAAU,UAAU,MAAM;EACrD,QAAQ,IAAI,iBAAiB,oBAAoB;EACjD,IAAI,UACF,QAAQ,IAAI,0BAA0B,MAAM;EAE9C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,eAAe,GAEvD,IAAI,CAAC,QAAQ,IAAI,GAAG,GAClB,QAAQ,IAAI,KAAK,KAAK;EAI1B,MAAM,WACJ,KAAK,eAAe,QAChB,qBAAqB,KAAK,aAAa,aAAa,IACpD,eAAe,MACb,MACA,OAAO,QAAQ,WACb,IAAI,IAAI,GAAG,IACX,IAAI,IAAK,IAAgB,GAAG;EAEtC,IAAI;GACF,OAAO,MAAM,MAAM,UAAU;IAAE,GAAG;IAAM;GAAQ,CAAC;EACnD,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,SAAS,SAAS,EAChC,CAAC;GAEH,MAAM;EACR;CACF;AACF;AAEA,SAAS,qBAAqB,KAA6B,OAAe,kBAAgC;CACxG,MAAM,WAAW,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;CACxG,MAAM,OAAO,IAAI,IAAI,wBAAwB,OAAO,gBAAgB,CAAC;CAOrE,MAAM,WAAW,SAAS,SAAS,QAAQ,eAAe,GAAG;CAC7D,OAAO,IAAI,IAAI,GAAG,WAAW,SAAS,UAAU,IAAI;AACtD;AAEA,SAAS,cAAc,SAA0B;CAC/C,OAAO,QAAQ,WAAW,SAAS;AACrC;AAEA,SAAS,+BAA+B,SAAiB,OAAyB;CAChF,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;CAGT,MAAM,cAAc,IAAI,wBAAwB;EAC9C,UAAU;EACV;EACA,2BAA2B;CAC7B,CAAC;CAED,OAAO,MAAM,KAAI,SAAQ;EACvB,IAAI,CAAC,QAAQ,OAAO,SAAS,YAAa,KAA4B,SAAS,YAC7E,OAAO;EAGT,MAAM,eAAe;EACrB,IAAI,CAAC,aAAa,aAChB,OAAO;EAGT,OAAO;GACL,GAAG;GACH,aAAa,iBAAiB;IAC5B,QAAQ,aAAa;IACrB,cAAc,CAAC,WAAW;IAC1B,MAAM;GACR,CAAC,CAAC,CAAC;EACL;CACF,CAAC;AACH;;AAGA,SAAS,wBAAwB,SAA0C;CACzE,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GACrC,IAAI,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,MAC7D,OAAO,OAAO;GAGhB,IAAI,cAAc,OAAO,GACvB,OAAgC,QAAQ,+BACtC,SACC,OAA+B,KAClC;GAGF,OAAO;EACT;CACF;AACF;;;;;;;;AASA,SAAgB,sBACd,UAAkB,WAClB,SACmB;CACnB,MAAM,UAAU,SAAS;CAYzB,OAAO,kBAAkB;EACvB,OAZc,uBAAuB;GACrC,MAAM;GACN,SAAS;GACT,QAAQ,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAAS,iBAAiB;GACjF;GACA,OACE,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAC3C,KAAA,IACC,6BAA6B;IAAE,YAAY;IAAO,aAAa,SAAS;GAAY,CAAC;EAC9F,CAGe,CAAC,CAAC,UAAU,OAAO;EAChC,YAAY,CAAC,wBAAwB,OAAO,CAAC;CAC/C,CAAC;AACH;;;;;;;;AAaA,MAAM,0BAA+C,CACnD;CACE,IAAI;CACJ,MAAM;CACN,QAAQ;CACR,oBAAoB,CAAC,mBAAmB;CACxC,mBAAmB;CACnB,gBAAgB;CAChB,mBAAmB;AACrB,CACF;AAEA,MAAM,iBAAiB,MAAU;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;AAQjC,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;;AAGzD,SAAgB,2BAAiC;CAC/C,eAAe;CACf,gBAAgB;AAClB;;;;;;;;;;;;;AAcA,eAAsB,uBAAuB,OAAsC,CAAC,GAAiC;CACnH,MAAM,UAAU,KAAK,eAAe,eAAe;CACnD,QAAQ,OAAO;CAEf,MAAM,OAAO,QAAQ,IAAI,mBAAmB;CAC5C,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,OAAO,CAAC;CAIV,IAAI,gBADQ,KAAK,IACK,IAAI,aAAa,YAAY,aAAa,KAC9D,OAAO,aAAa;CAGtB,IAAI,eAAe,OAAO;CAE1B,iBAAiB,YAA0C;EACzD,IAAI;GAEF,MAAM,cAAc,MAAM,QAAQ,UAAU,mBAAmB;GAC/D,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,yBAAyB;GAC3D,QAAQ,OAAO;GAGf,MAAM,gBADY,QAAQ,IAAI,mBACC,CAAC,EAA2C;GAC3E,MAAM,UAAU,wBAAwB,aAAa,aAAa;GAElE,MAAM,aAAa,IAAI,gBAAgB;GACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,wBAAwB;GAC3E,IAAI;IACF,MAAM,SAAS,MAAM,mBAAmB;KACtC;KACA,aAAa;KACb,QAAQ,WAAW;IACrB,CAAC;IACD,eAAe;KAAE,WAAW,KAAK,IAAI;KAAG,KAAK;KAAgB;IAAO;IACpE,OAAO;GACT,UAAU;IACR,aAAa,KAAK;GACpB;EACF,SAAS,OAAO;GACd,eAAe;IACb,WAAW,KAAK,IAAI;IACpB,KAAK;IACL,QAAQ;GACV;GACA,QAAQ,KACN,oEACA,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;GACA,OAAO;EACT,UAAU;GACR,gBAAgB;EAClB;CACF,EAAA,CAAG;CAEH,OAAO;AACT"}

package/dist/providers/openai-codex.d.ts

@@ -0,0 +1,72 @@
+/**
+ * OpenAI Codex OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.
+ * This allows access to OpenAI models through the ChatGPT OAuth flow.
+ *
+ * Inspired by opencode's Codex plugin implementation:
+ * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import type { LanguageModelMiddleware } from 'ai';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+/**
+ * Get or create the shared AuthStorage instance
+ */
+export declare function getAuthStorage(): AuthStorage;
+/**
+ * Set a custom AuthStorage instance (useful for TUI integration)
+ */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/** Valid thinking level values. */
+export type ThinkingLevel = 'off' | 'low' | 'medium' | 'high' | 'xhigh';
+export declare function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel;
+export declare const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined>;
+/**
+ * Create Codex middleware with the given reasoning effort level.
+ */
+export declare function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware;
+/**
+ * Build a fetch function that handles OpenAI Codex OAuth.
+ * Preserves non-authorization headers from init.
+ * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions
+ * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the
+ * SDK already targets the correct URL.
+ */
+export declare function buildOpenAICodexOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+    rewriteUrl?: boolean;
+}): typeof fetch;
+/**
+ * Build a fetch function for Stagehand-on-Codex.
+ *
+ * The Codex backend has two requirements that AI SDK's non-streaming
+ * `generateText` path doesn't naturally satisfy:
+ *
+ *   1. `stream: true` must be set on every request body.
+ *   2. The response is delivered as Server-Sent Events; AI SDK's
+ *      non-streaming code path expects a single JSON body.
+ *
+ * This fetch forces streaming on the outgoing request, collects the SSE
+ * events, and synthesizes the non-streaming JSON shape that
+ * `@ai-sdk/openai`'s Responses API parser expects.
+ *
+ * Headers, OAuth refresh, and URL targeting are handled by the caller via
+ * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the
+ * live OAuth bearer per call.
+ */
+export declare function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch;
+/**
+ * Creates an OpenAI model using ChatGPT OAuth authentication
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+ *
+ * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.
+ * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.
+ */
+export declare function openaiCodexProvider(modelId?: string, options?: {
+    thinkingLevel?: ThinkingLevel;
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=openai-codex.d.ts.map

package/dist/providers/openai-codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../src/providers/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUxD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAIxE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAO9F;AAID,eAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAMxF,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4BvF;AAqCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAyDd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,KAAK,CAgC/E;AAwID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC3G,iBAAiB,CAmCnB"}