@mastra/code-sdk 0.0.0-esbuild-bundle-worker-20260807173433

package/dist/providers/openai-codex.js

@@ -0,0 +1,302 @@
+import { AuthStorage } from "../auth/storage.js";
+import { createOpenAI } from "@ai-sdk/openai";
+import { wrapLanguageModel } from "ai";
+//#region src/providers/openai-codex.ts
+/**
+* OpenAI Codex OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.
+* This allows access to OpenAI models through the ChatGPT OAuth flow.
+*
+* Inspired by opencode's Codex plugin implementation:
+* https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts
+*/
+const CODEX_API_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
+const CODEX_ORIGINATOR = "mastracode";
+const CODEX_USER_AGENT = "mastracode";
+let authStorageInstance = null;
+/**
+* Get or create the shared AuthStorage instance
+*/
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+/**
+* Set a custom AuthStorage instance (useful for TUI integration)
+*/
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+const CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.
+
+IMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;
+const GPT5_MODEL_RE = /^gpt-5(?:\.|-|$)/;
+function getEffectiveThinkingLevel(modelId, level) {
+	if (GPT5_MODEL_RE.test(modelId) && level === "off") return "low";
+	return level;
+}
+const THINKING_LEVEL_TO_REASONING_EFFORT = {
+	off: void 0,
+	low: "low",
+	medium: "medium",
+	high: "high",
+	xhigh: "xhigh"
+};
+/**
+* Create Codex middleware with the given reasoning effort level.
+*/
+function createCodexMiddleware(reasoningEffort) {
+	return {
+		specificationVersion: "v3",
+		transformParams: async ({ params }) => {
+			if (params.temperature !== void 0 && params.temperature !== null) delete params.topP;
+			params.providerOptions = {
+				...params.providerOptions,
+				openai: {
+					...params.providerOptions?.openai ?? {},
+					instructions: CODEX_INSTRUCTIONS,
+					store: false,
+					...reasoningEffort ? { reasoningEffort } : {}
+				}
+			};
+			return params;
+		}
+	};
+}
+/**
+* Get a live OAuth bearer token for the Codex OAuth credential.
+*
+* Refreshes the token if it's expired, and returns the credential's
+* accountId alongside the access token. Throws if the user isn't logged in
+* or if the refresh fails.
+*
+* This is the only piece of Codex auth that is genuinely shared between
+* the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand
+* fetch (`buildCodexStagehandFetch`).
+*/
+async function getCodexBearer(authStorage) {
+	const storage = authStorage ?? getAuthStorage();
+	storage.reload();
+	const cred = storage.get("openai-codex");
+	if (!cred || cred.type !== "oauth") throw new Error("Not logged in to OpenAI Codex. Run /login first.");
+	let accessToken = cred.access;
+	if (Date.now() >= cred.expires) {
+		const refreshedToken = await storage.getApiKey("openai-codex");
+		if (!refreshedToken) throw new Error("Failed to refresh OpenAI Codex token. Please /login again.");
+		accessToken = refreshedToken;
+		storage.reload();
+	}
+	return {
+		accessToken,
+		accountId: cred.accountId
+	};
+}
+/**
+* Build a fetch function that handles OpenAI Codex OAuth.
+* Preserves non-authorization headers from init.
+* When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions
+* to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the
+* SDK already targets the correct URL.
+*/
+function buildOpenAICodexOAuthFetch(opts = {}) {
+	return (async (url, init) => {
+		const { accessToken, accountId } = await getCodexBearer(opts.authStorage);
+		const headers = new Headers();
+		if (init?.headers) {
+			if (init.headers instanceof Headers) init.headers.forEach((value, key) => {
+				if (key.toLowerCase() !== "authorization") headers.set(key, value);
+			});
+			else if (Array.isArray(init.headers)) {
+				for (const [key, value] of init.headers) if (key.toLowerCase() !== "authorization" && value !== void 0) headers.set(key, String(value));
+			} else for (const [key, value] of Object.entries(init.headers)) if (key.toLowerCase() !== "authorization" && value !== void 0) headers.set(key, String(value));
+		}
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		if (!headers.has("originator")) headers.set("originator", CODEX_ORIGINATOR);
+		if (!headers.has("User-Agent")) headers.set("User-Agent", CODEX_USER_AGENT);
+		if (accountId) headers.set("ChatGPT-Account-ID", accountId);
+		const parsed = url instanceof URL ? url : new URL(typeof url === "string" ? url : url.url);
+		const finalUrl = opts.rewriteUrl !== false && (parsed.pathname.includes("/v1/responses") || parsed.pathname.includes("/chat/completions")) ? new URL(CODEX_API_ENDPOINT) : parsed;
+		try {
+			return await fetch(finalUrl, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: finalUrl.toString() });
+			throw error;
+		}
+	});
+}
+/**
+* Build a fetch function for Stagehand-on-Codex.
+*
+* The Codex backend has two requirements that AI SDK's non-streaming
+* `generateText` path doesn't naturally satisfy:
+*
+*   1. `stream: true` must be set on every request body.
+*   2. The response is delivered as Server-Sent Events; AI SDK's
+*      non-streaming code path expects a single JSON body.
+*
+* This fetch forces streaming on the outgoing request, collects the SSE
+* events, and synthesizes the non-streaming JSON shape that
+* `@ai-sdk/openai`'s Responses API parser expects.
+*
+* Headers, OAuth refresh, and URL targeting are handled by the caller via
+* `baseURL` / `headers` on the AI SDK provider; this fetch only injects the
+* live OAuth bearer per call.
+*/
+function buildCodexStagehandFetch(authStorage) {
+	return (async (url, init) => {
+		const { accessToken } = await getCodexBearer(authStorage);
+		const headers = new Headers(init?.headers);
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		headers.set("Accept", "text/event-stream");
+		let body = init?.body;
+		if (typeof init?.body === "string") try {
+			const parsed = JSON.parse(init.body);
+			parsed.stream = true;
+			body = JSON.stringify(parsed);
+			if (!headers.has("content-type")) headers.set("content-type", "application/json");
+		} catch {}
+		const upstream = await fetch(url, {
+			...init,
+			headers,
+			body
+		});
+		if (!upstream.ok) return upstream;
+		const aggregated = await aggregateCodexStream(upstream);
+		return new Response(aggregated, {
+			status: 200,
+			headers: { "content-type": "application/json" }
+		});
+	});
+}
+/**
+* Read an SSE Response and reduce it to a single JSON string matching the
+* non-streaming OpenAI Responses-API shape.
+*
+* Event vocabulary we care about (per OpenAI Responses API streaming):
+*   - response.created         → carries `response` object (id, model, usage stub)
+*   - response.output_item.added/done → output items (message, reasoning, etc.)
+*   - response.output_text.delta → text chunks
+*   - response.completed       → final `response` snapshot incl. usage
+*   - response.error / error   → bubble up as a thrown body
+*
+* Reasoning events (`response.reasoning_summary.*`) are intentionally ignored
+* for the non-streaming text response.
+*/
+async function aggregateCodexStream(response) {
+	if (!response.body) throw new Error("Codex streaming response had no body");
+	const reader = response.body.getReader();
+	const decoder = new TextDecoder("utf-8");
+	let buffer = "";
+	let finalResponse = null;
+	let createdResponse = null;
+	const items = /* @__PURE__ */ new Map();
+	const textBuffers = /* @__PURE__ */ new Map();
+	const handleEvent = (event) => {
+		if (!event.data || event.data === "[DONE]") return;
+		let payload;
+		try {
+			payload = JSON.parse(event.data);
+		} catch {
+			return;
+		}
+		switch (payload.type ?? event.event ?? "") {
+			case "response.created":
+				createdResponse = payload.response ?? createdResponse;
+				break;
+			case "response.output_item.added":
+				if (typeof payload.output_index === "number" && payload.item) items.set(payload.output_index, payload.item);
+				break;
+			case "response.output_item.done":
+				if (typeof payload.output_index === "number" && payload.item) items.set(payload.output_index, payload.item);
+				break;
+			case "response.output_text.delta": {
+				const key = `${payload.output_index}:${payload.content_index ?? 0}`;
+				textBuffers.set(key, (textBuffers.get(key) ?? "") + (payload.delta ?? ""));
+				break;
+			}
+			case "response.completed":
+				finalResponse = payload.response ?? finalResponse;
+				break;
+			case "response.error":
+			case "error": throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);
+			default: break;
+		}
+	};
+	const processChunk = (chunk) => {
+		buffer += chunk.replace(/\r\n/g, "\n");
+		let sepIdx;
+		while ((sepIdx = buffer.indexOf("\n\n")) !== -1) {
+			const raw = buffer.slice(0, sepIdx);
+			buffer = buffer.slice(sepIdx + 2);
+			const event = {};
+			const dataLines = [];
+			for (const line of raw.split("\n")) if (line.startsWith("event:")) event.event = line.slice(6).trim();
+			else if (line.startsWith("data:")) dataLines.push(line.slice(5).trimStart());
+			if (dataLines.length > 0) event.data = dataLines.join("\n");
+			handleEvent(event);
+		}
+	};
+	try {
+		while (true) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			processChunk(decoder.decode(value, { stream: true }));
+		}
+		processChunk(decoder.decode());
+	} finally {
+		reader.releaseLock();
+	}
+	const base = finalResponse ?? createdResponse ?? { output: [] };
+	const finalItems = Array.from(items.entries()).sort(([a], [b]) => a - b).map(([index, item]) => {
+		if (item?.type === "message" && Array.isArray(item.content)) item.content = item.content.map((c, ci) => {
+			const key = `${index}:${ci}`;
+			if (textBuffers.has(key)) return {
+				...c,
+				text: textBuffers.get(key)
+			};
+			return c;
+		});
+		return item;
+	});
+	base.output = finalItems.length > 0 ? finalItems : base.output ?? [];
+	return JSON.stringify(base);
+}
+/**
+* Creates an OpenAI model using ChatGPT OAuth authentication
+* Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
+*
+* IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.
+* URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.
+*/
+function openaiCodexProvider(modelId = "codex-mini-latest", options) {
+	const effectiveLevel = getEffectiveThinkingLevel(modelId, options?.thinkingLevel ?? "medium");
+	const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];
+	const middleware = createCodexMiddleware(reasoningEffort);
+	const headers = options?.headers;
+	const baseURL = process.env.OPENAI_BASE_URL;
+	if (process.env.NODE_ENV === "test" || process.env.VITEST) return wrapLanguageModel({
+		model: createOpenAI({
+			apiKey: "test-api-key",
+			baseURL,
+			headers
+		}).responses(modelId),
+		middleware: [middleware]
+	});
+	return wrapLanguageModel({
+		model: createOpenAI({
+			apiKey: "oauth-dummy-key",
+			baseURL,
+			headers,
+			fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage })
+		}).responses(modelId),
+		middleware: [middleware]
+	});
+}
+//#endregion
+export { THINKING_LEVEL_TO_REASONING_EFFORT, buildCodexStagehandFetch, buildOpenAICodexOAuthFetch, createCodexMiddleware, getAuthStorage, getEffectiveThinkingLevel, openaiCodexProvider, setAuthStorage };
+
+//# sourceMappingURL=openai-codex.js.map

package/dist/providers/openai-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex.js","names":[],"sources":["../../src/providers/openai-codex.ts"],"sourcesContent":["/**\n * OpenAI Codex OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.\n * This allows access to OpenAI models through the ChatGPT OAuth flow.\n *\n * Inspired by opencode's Codex plugin implementation:\n * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts\n */\n\nimport { createOpenAI } from '@ai-sdk/openai';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\n// Codex API endpoint (not standard OpenAI API)\nconst CODEX_API_ENDPOINT = 'https://chatgpt.com/backend-api/codex/responses';\nconst CODEX_ORIGINATOR = 'mastracode';\nconst CODEX_USER_AGENT = 'mastracode';\n\n// Singleton auth storage instance (shared with claude-max.ts)\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n// Default instructions for Codex API (required)\nconst CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nIMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;\n\n/** Valid thinking level values. */\nexport type ThinkingLevel = 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n\nconst GPT5_MODEL_RE = /^gpt-5(?:\\.|-|$)/;\n\nexport function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  // GPT-5.* models on Codex require at least low reasoning.\n  if (GPT5_MODEL_RE.test(modelId) && level === 'off') {\n    return 'low';\n  }\n\n  return level;\n}\n\n// Map thinkingLevel state values to OpenAI reasoningEffort values.\n// undefined means omit the parameter (no reasoning).\nexport const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined> = {\n  off: undefined,\n  low: 'low',\n  medium: 'medium',\n  high: 'high',\n  xhigh: 'xhigh',\n};\n\n/**\n * Create Codex middleware with the given reasoning effort level.\n */\nexport function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      // Remove topP if temperature is set (OpenAI doesn't like both)\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      // Codex API requires specific settings via providerOptions\n      // Use type assertion to satisfy JSONValue constraints\n      params.providerOptions = {\n        ...params.providerOptions,\n        openai: {\n          ...(params.providerOptions?.openai ?? {}),\n          instructions: CODEX_INSTRUCTIONS,\n          // Codex API requires store to be false\n          store: false,\n          // Enable reasoning for Codex models — without this, the model\n          // skips the reasoning/action phase and goes straight to final_answer,\n          // resulting in narration instead of tool calls.\n          ...(reasoningEffort ? { reasoningEffort } : {}),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Get a live OAuth bearer token for the Codex OAuth credential.\n *\n * Refreshes the token if it's expired, and returns the credential's\n * accountId alongside the access token. Throws if the user isn't logged in\n * or if the refresh fails.\n *\n * This is the only piece of Codex auth that is genuinely shared between\n * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand\n * fetch (`buildCodexStagehandFetch`).\n */\nasync function getCodexBearer(\n  authStorage?: CredentialStore,\n): Promise<{ accessToken: string; accountId: string | undefined }> {\n  const storage = authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get('openai-codex');\n  if (!cred || cred.type !== 'oauth') {\n    throw new Error('Not logged in to OpenAI Codex. Run /login first.');\n  }\n\n  let accessToken = cred.access;\n  if (Date.now() >= cred.expires) {\n    const refreshedToken = await storage.getApiKey('openai-codex');\n    if (!refreshedToken) {\n      throw new Error('Failed to refresh OpenAI Codex token. Please /login again.');\n    }\n    accessToken = refreshedToken;\n    storage.reload();\n  }\n\n  return { accessToken, accountId: (cred as any).accountId as string | undefined };\n}\n\n/**\n * Build a fetch function that handles OpenAI Codex OAuth.\n * Preserves non-authorization headers from init.\n * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions\n * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the\n * SDK already targets the correct URL.\n */\nexport function buildOpenAICodexOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { accessToken, accountId } = await getCodexBearer(opts.authStorage);\n\n    // Preserve non-authorization headers\n    const headers = new Headers();\n    if (init?.headers) {\n      if (init.headers instanceof Headers) {\n        init.headers.forEach((value, key) => {\n          if (key.toLowerCase() !== 'authorization') {\n            headers.set(key, value);\n          }\n        });\n      } else if (Array.isArray(init.headers)) {\n        for (const [key, value] of init.headers) {\n          if (key!.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key!, String(value));\n          }\n        }\n      } else {\n        for (const [key, value] of Object.entries(init.headers)) {\n          if (key.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key, String(value));\n          }\n        }\n      }\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    if (!headers.has('originator')) {\n      headers.set('originator', CODEX_ORIGINATOR);\n    }\n    if (!headers.has('User-Agent')) {\n      headers.set('User-Agent', CODEX_USER_AGENT);\n    }\n    if (accountId) {\n      headers.set('ChatGPT-Account-ID', accountId);\n    }\n\n    // URL rewriting — only when rewriteUrl !== false\n    const parsed = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n    const shouldRewrite =\n      opts.rewriteUrl !== false &&\n      (parsed.pathname.includes('/v1/responses') || parsed.pathname.includes('/chat/completions'));\n    const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Build a fetch function for Stagehand-on-Codex.\n *\n * The Codex backend has two requirements that AI SDK's non-streaming\n * `generateText` path doesn't naturally satisfy:\n *\n *   1. `stream: true` must be set on every request body.\n *   2. The response is delivered as Server-Sent Events; AI SDK's\n *      non-streaming code path expects a single JSON body.\n *\n * This fetch forces streaming on the outgoing request, collects the SSE\n * events, and synthesizes the non-streaming JSON shape that\n * `@ai-sdk/openai`'s Responses API parser expects.\n *\n * Headers, OAuth refresh, and URL targeting are handled by the caller via\n * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the\n * live OAuth bearer per call.\n */\nexport function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    // Refresh + inject the OAuth bearer per call\n    const { accessToken } = await getCodexBearer(authStorage);\n    const headers = new Headers(init?.headers);\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('Accept', 'text/event-stream');\n\n    // Force stream: true on the request body\n    type FetchBody = NonNullable<Parameters<typeof fetch>[1]>['body'];\n    let body: FetchBody | undefined = init?.body;\n    if (typeof init?.body === 'string') {\n      try {\n        const parsed = JSON.parse(init.body) as Record<string, unknown>;\n        parsed.stream = true;\n        body = JSON.stringify(parsed);\n        if (!headers.has('content-type')) headers.set('content-type', 'application/json');\n      } catch {\n        // Not JSON; leave as-is\n      }\n    }\n\n    const upstream = await fetch(url, { ...init, headers, body });\n    if (!upstream.ok) return upstream;\n\n    // Aggregate SSE -> synthesized non-streaming Response\n    const aggregated = await aggregateCodexStream(upstream);\n    return new Response(aggregated, {\n      status: 200,\n      headers: { 'content-type': 'application/json' },\n    });\n  }) as typeof fetch;\n}\n\n/**\n * Read an SSE Response and reduce it to a single JSON string matching the\n * non-streaming OpenAI Responses-API shape.\n *\n * Event vocabulary we care about (per OpenAI Responses API streaming):\n *   - response.created         → carries `response` object (id, model, usage stub)\n *   - response.output_item.added/done → output items (message, reasoning, etc.)\n *   - response.output_text.delta → text chunks\n *   - response.completed       → final `response` snapshot incl. usage\n *   - response.error / error   → bubble up as a thrown body\n *\n * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored\n * for the non-streaming text response.\n */\nasync function aggregateCodexStream(response: Response): Promise<string> {\n  if (!response.body) {\n    throw new Error('Codex streaming response had no body');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder('utf-8');\n  let buffer = '';\n\n  let finalResponse: any = null;\n  let createdResponse: any = null;\n  // Track output_items by index so we can rebuild the final array\n  const items = new Map<number, any>();\n  // Accumulate output_text deltas keyed by item_index + content_index\n  const textBuffers = new Map<string, string>();\n\n  const handleEvent = (event: { event?: string; data?: string }) => {\n    if (!event.data || event.data === '[DONE]') return;\n    let payload: any;\n    try {\n      payload = JSON.parse(event.data);\n    } catch {\n      return;\n    }\n    const type: string = payload.type ?? event.event ?? '';\n\n    switch (type) {\n      case 'response.created': {\n        createdResponse = payload.response ?? createdResponse;\n        break;\n      }\n      case 'response.output_item.added': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_item.done': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_text.delta': {\n        const key = `${payload.output_index}:${payload.content_index ?? 0}`;\n        textBuffers.set(key, (textBuffers.get(key) ?? '') + (payload.delta ?? ''));\n        break;\n      }\n      case 'response.completed': {\n        finalResponse = payload.response ?? finalResponse;\n        break;\n      }\n      case 'response.error':\n      case 'error': {\n        throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);\n      }\n      default:\n        // Ignore reasoning / unknown events\n        break;\n    }\n  };\n\n  // SSE parser: events separated by blank line; lines like \"event: x\" / \"data: y\"\n  // Normalize CRLF→LF so \\r\\n\\r\\n event boundaries parse correctly (SSE spec allows CRLF).\n  const processChunk = (chunk: string) => {\n    buffer += chunk.replace(/\\r\\n/g, '\\n');\n    let sepIdx: number;\n    while ((sepIdx = buffer.indexOf('\\n\\n')) !== -1) {\n      const raw = buffer.slice(0, sepIdx);\n      buffer = buffer.slice(sepIdx + 2);\n      const event: { event?: string; data?: string } = {};\n      const dataLines: string[] = [];\n      for (const line of raw.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event.event = line.slice(6).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice(5).trimStart());\n        }\n      }\n      if (dataLines.length > 0) {\n        event.data = dataLines.join('\\n');\n      }\n      handleEvent(event);\n    }\n  };\n\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      processChunk(decoder.decode(value, { stream: true }));\n    }\n    processChunk(decoder.decode());\n  } finally {\n    reader.releaseLock();\n  }\n\n  // Stitch accumulated text deltas back into their items\n  const base = finalResponse ?? createdResponse ?? { output: [] };\n  const finalItems = Array.from(items.entries())\n    .sort(([a], [b]) => a - b)\n    .map(([index, item]) => {\n      // Patch message-type items' content text using buffered deltas\n      if (item?.type === 'message' && Array.isArray(item.content)) {\n        item.content = item.content.map((c: any, ci: number) => {\n          const key = `${index}:${ci}`;\n          if (textBuffers.has(key)) {\n            return { ...c, text: textBuffers.get(key) };\n          }\n          return c;\n        });\n      }\n      return item;\n    });\n\n  base.output = finalItems.length > 0 ? finalItems : (base.output ?? []);\n\n  return JSON.stringify(base);\n}\n\n/**\n * Creates an OpenAI model using ChatGPT OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n *\n * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.\n * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.\n */\nexport function openaiCodexProvider(\n  modelId: string = 'codex-mini-latest',\n  options?: { thinkingLevel?: ThinkingLevel; headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const requestedLevel: ThinkingLevel = options?.thinkingLevel ?? 'medium';\n  const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);\n  const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n  const middleware = createCodexMiddleware(reasoningEffort);\n  const headers = options?.headers;\n\n  const baseURL = process.env.OPENAI_BASE_URL;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const openai = createOpenAI({\n      apiKey: 'test-api-key',\n      baseURL,\n      headers,\n    });\n    return wrapLanguageModel({\n      model: openai.responses(modelId),\n      middleware: [middleware],\n    });\n  }\n\n  const openai = createOpenAI({\n    apiKey: 'oauth-dummy-key',\n    baseURL,\n    headers,\n    fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Use the responses API for Codex models\n  // Wrap with middleware\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [middleware],\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAGzB,IAAI,sBAA0C;;;;AAK9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;AAGA,MAAM,qBAAqB;;;AAO3B,MAAM,gBAAgB;AAEtB,SAAgB,0BAA0B,SAAiB,OAAqC;CAE9F,IAAI,cAAc,KAAK,OAAO,KAAK,UAAU,OAC3C,OAAO;CAGT,OAAO;AACT;AAIA,MAAa,qCAAgF;CAC3F,KAAK,KAAA;CACL,KAAK;CACL,QAAQ;CACR,MAAM;CACN,OAAO;AACT;;;;AAKA,SAAgB,sBAAsB,iBAAmD;CACvF,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GAErC,IAAI,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,MAC7D,OAAO,OAAO;GAKhB,OAAO,kBAAkB;IACvB,GAAG,OAAO;IACV,QAAQ;KACN,GAAI,OAAO,iBAAiB,UAAU,CAAC;KACvC,cAAc;KAEd,OAAO;KAIP,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;IAC/C;GACF;GAEA,OAAO;EACT;CACF;AACF;;;;;;;;;;;;AAaA,eAAe,eACb,aACiE;CACjE,MAAM,UAAU,eAAe,eAAe;CAC9C,QAAQ,OAAO;CAEf,MAAM,OAAO,QAAQ,IAAI,cAAc;CACvC,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,MAAM,kDAAkD;CAGpE,IAAI,cAAc,KAAK;CACvB,IAAI,KAAK,IAAI,KAAK,KAAK,SAAS;EAC9B,MAAM,iBAAiB,MAAM,QAAQ,UAAU,cAAc;EAC7D,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,4DAA4D;EAE9E,cAAc;EACd,QAAQ,OAAO;CACjB;CAEA,OAAO;EAAE;EAAa,WAAY,KAAa;CAAgC;AACjF;;;;;;;;AASA,SAAgB,2BACd,OAAgE,CAAC,GACnD;CACd,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,EAAE,aAAa,cAAc,MAAM,eAAe,KAAK,WAAW;EAGxE,MAAM,UAAU,IAAI,QAAQ;EAC5B,IAAI,MAAM,SACJ;OAAA,KAAK,mBAAmB,SAC1B,KAAK,QAAQ,SAAS,OAAO,QAAQ;IACnC,IAAI,IAAI,YAAY,MAAM,iBACxB,QAAQ,IAAI,KAAK,KAAK;GAE1B,CAAC;QACI,IAAI,MAAM,QAAQ,KAAK,OAAO,GAC9B;SAAA,MAAM,CAAC,KAAK,UAAU,KAAK,SAC9B,IAAI,IAAK,YAAY,MAAM,mBAAmB,UAAU,KAAA,GACtD,QAAQ,IAAI,KAAM,OAAO,KAAK,CAAC;GAAA,OAInC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,GACpD,IAAI,IAAI,YAAY,MAAM,mBAAmB,UAAU,KAAA,GACrD,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;EAAA;EAMtC,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,gBAAgB;EAE5C,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,gBAAgB;EAE5C,IAAI,WACF,QAAQ,IAAI,sBAAsB,SAAS;EAI7C,MAAM,SAAS,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;EAItG,MAAM,WAFJ,KAAK,eAAe,UACnB,OAAO,SAAS,SAAS,eAAe,KAAK,OAAO,SAAS,SAAS,mBAAmB,KAC3D,IAAI,IAAI,kBAAkB,IAAI;EAE/D,IAAI;GACF,OAAO,MAAM,MAAM,UAAU;IAAE,GAAG;IAAM;GAAQ,CAAC;EACnD,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,SAAS,SAAS,EAChC,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,yBAAyB,aAAwC;CAC/E,QAAQ,OAAO,KAA6B,SAAuC;EAEjF,MAAM,EAAE,gBAAgB,MAAM,eAAe,WAAW;EACxD,MAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;EACzC,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,QAAQ,IAAI,UAAU,mBAAmB;EAIzC,IAAI,OAA8B,MAAM;EACxC,IAAI,OAAO,MAAM,SAAS,UACxB,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,KAAK,IAAI;GACnC,OAAO,SAAS;GAChB,OAAO,KAAK,UAAU,MAAM;GAC5B,IAAI,CAAC,QAAQ,IAAI,cAAc,GAAG,QAAQ,IAAI,gBAAgB,kBAAkB;EAClF,QAAQ,CAER;EAGF,MAAM,WAAW,MAAM,MAAM,KAAK;GAAE,GAAG;GAAM;GAAS;EAAK,CAAC;EAC5D,IAAI,CAAC,SAAS,IAAI,OAAO;EAGzB,MAAM,aAAa,MAAM,qBAAqB,QAAQ;EACtD,OAAO,IAAI,SAAS,YAAY;GAC9B,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;EAChD,CAAC;CACH;AACF;;;;;;;;;;;;;;;AAgBA,eAAe,qBAAqB,UAAqC;CACvE,IAAI,CAAC,SAAS,MACZ,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,UAAU,IAAI,YAAY,OAAO;CACvC,IAAI,SAAS;CAEb,IAAI,gBAAqB;CACzB,IAAI,kBAAuB;CAE3B,MAAM,wBAAQ,IAAI,IAAiB;CAEnC,MAAM,8BAAc,IAAI,IAAoB;CAE5C,MAAM,eAAe,UAA6C;EAChE,IAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,UAAU;EAC5C,IAAI;EACJ,IAAI;GACF,UAAU,KAAK,MAAM,MAAM,IAAI;EACjC,QAAQ;GACN;EACF;EAGA,QAFqB,QAAQ,QAAQ,MAAM,SAAS,IAEpD;GACE,KAAK;IACH,kBAAkB,QAAQ,YAAY;IACtC;GAEF,KAAK;IACH,IAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MACtD,MAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;IAE9C;GAEF,KAAK;IACH,IAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MACtD,MAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;IAE9C;GAEF,KAAK,8BAA8B;IACjC,MAAM,MAAM,GAAG,QAAQ,aAAa,GAAG,QAAQ,iBAAiB;IAChE,YAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;IACzE;GACF;GACA,KAAK;IACH,gBAAgB,QAAQ,YAAY;IACpC;GAEF,KAAK;GACL,KAAK,SACH,MAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,QAAQ,SAAS,OAAO,GAAG;GAEnF,SAEE;EACJ;CACF;CAIA,MAAM,gBAAgB,UAAkB;EACtC,UAAU,MAAM,QAAQ,SAAS,IAAI;EACrC,IAAI;EACJ,QAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,IAAI;GAC/C,MAAM,MAAM,OAAO,MAAM,GAAG,MAAM;GAClC,SAAS,OAAO,MAAM,SAAS,CAAC;GAChC,MAAM,QAA2C,CAAC;GAClD,MAAM,YAAsB,CAAC;GAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAC/B,IAAI,KAAK,WAAW,QAAQ,GAC1B,MAAM,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;QAC5B,IAAI,KAAK,WAAW,OAAO,GAChC,UAAU,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;GAG5C,IAAI,UAAU,SAAS,GACrB,MAAM,OAAO,UAAU,KAAK,IAAI;GAElC,YAAY,KAAK;EACnB;CACF;CAEA,IAAI;EACF,OAAO,MAAM;GACX,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,aAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD;EACA,aAAa,QAAQ,OAAO,CAAC;CAC/B,UAAU;EACR,OAAO,YAAY;CACrB;CAGA,MAAM,OAAO,iBAAiB,mBAAmB,EAAE,QAAQ,CAAC,EAAE;CAC9D,MAAM,aAAa,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CACzB,KAAK,CAAC,OAAO,UAAU;EAEtB,IAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,KAAK,OAAO,GACxD,KAAK,UAAU,KAAK,QAAQ,KAAK,GAAQ,OAAe;GACtD,MAAM,MAAM,GAAG,MAAM,GAAG;GACxB,IAAI,YAAY,IAAI,GAAG,GACrB,OAAO;IAAE,GAAG;IAAG,MAAM,YAAY,IAAI,GAAG;GAAE;GAE5C,OAAO;EACT,CAAC;EAEH,OAAO;CACT,CAAC;CAEH,KAAK,SAAS,WAAW,SAAS,IAAI,aAAc,KAAK,UAAU,CAAC;CAEpE,OAAO,KAAK,UAAU,IAAI;AAC5B;;;;;;;;AASA,SAAgB,oBACd,UAAkB,qBAClB,SACmB;CAEnB,MAAM,iBAAiB,0BAA0B,SADX,SAAS,iBAAiB,QACQ;CACxE,MAAM,kBAAkB,mCAAmC;CAC3D,MAAM,aAAa,sBAAsB,eAAe;CACxD,MAAM,UAAU,SAAS;CAEzB,MAAM,UAAU,QAAQ,IAAI;CAG5B,IAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAMjD,OAAO,kBAAkB;EACvB,OANa,aAAa;GAC1B,QAAQ;GACR;GACA;EACF,CAEc,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC,UAAU;CACzB,CAAC;CAYH,OAAO,kBAAkB;EACvB,OAVa,aAAa;GAC1B,QAAQ;GACR;GACA;GACA,OAAO,2BAA2B,EAAE,aAAa,SAAS,YAAY,CAAC;EACzE,CAKc,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC,UAAU;CACzB,CAAC;AACH"}

package/dist/providers/xai.d.ts

@@ -0,0 +1,33 @@
+/**
+ * xAI (Grok) OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with the xAI API.
+ * The xAI API speaks an OpenAI-compatible chat format, and the OAuth access
+ * token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`
+ * into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)
+ * access token.
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+/** Get or create the shared AuthStorage instance. */
+export declare function getAuthStorage(): AuthStorage;
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/**
+ * Build a fetch wrapper that authenticates with xAI OAuth.
+ * Injects the access token (auto-refreshed by AuthStorage) as a bearer token,
+ * preserving non-auth headers from the caller.
+ */
+export declare function buildXAIOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+}): typeof fetch;
+/**
+ * Creates an xAI model using OAuth authentication.
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed).
+ */
+export declare function xaiProvider(modelId: string, options?: {
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=xai.d.ts.map

package/dist/providers/xai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.d.ts","sourceRoot":"","sources":["../../src/providers/xai.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAQxD,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAsC7F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CASnB"}

package/dist/providers/xai.js

@@ -0,0 +1,70 @@
+import { AuthStorage } from "../auth/storage.js";
+import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
+//#region src/providers/xai.ts
+/**
+* xAI (Grok) OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with the xAI API.
+* The xAI API speaks an OpenAI-compatible chat format, and the OAuth access
+* token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`
+* into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)
+* access token.
+*/
+const XAI_PROVIDER_ID = "xai";
+const XAI_BASE_URL = "https://api.x.ai/v1";
+let authStorageInstance = null;
+/** Get or create the shared AuthStorage instance. */
+function getAuthStorage() {
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
+}
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+function setAuthStorage(storage) {
+	authStorageInstance = storage ?? null;
+}
+/**
+* Build a fetch wrapper that authenticates with xAI OAuth.
+* Injects the access token (auto-refreshed by AuthStorage) as a bearer token,
+* preserving non-auth headers from the caller.
+*/
+function buildXAIOAuthFetch(opts = {}) {
+	return (async (url, init) => {
+		const storage = opts.authStorage ?? getAuthStorage();
+		storage.reload();
+		const cred = storage.get(XAI_PROVIDER_ID);
+		if (!cred || cred.type !== "oauth") throw new Error("Not logged in to xAI. Run /login first.");
+		const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);
+		if (!accessToken) throw new Error("Failed to refresh xAI token. Please /login again.");
+		const headers = new Headers(url instanceof Request ? url.headers : void 0);
+		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
+		headers.delete("authorization");
+		headers.delete("x-api-key");
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		try {
+			return await fetch(url, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: url instanceof URL ? url.toString() : typeof url === "string" ? url : url.url });
+			throw error;
+		}
+	});
+}
+/**
+* Creates an xAI model using OAuth authentication.
+* Uses OAuth tokens from AuthStorage (auto-refreshes when needed).
+*/
+function xaiProvider(modelId, options) {
+	return createOpenAICompatible({
+		name: XAI_PROVIDER_ID,
+		baseURL: XAI_BASE_URL,
+		apiKey: "oauth-placeholder",
+		headers: options?.headers,
+		fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage })
+	}).chatModel(modelId);
+}
+//#endregion
+export { buildXAIOAuthFetch, getAuthStorage, setAuthStorage, xaiProvider };
+
+//# sourceMappingURL=xai.js.map

package/dist/providers/xai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.js","names":[],"sources":["../../src/providers/xai.ts"],"sourcesContent":["/**\n * xAI (Grok) OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with the xAI API.\n * The xAI API speaks an OpenAI-compatible chat format, and the OAuth access\n * token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`\n * into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)\n * access token.\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\nconst XAI_PROVIDER_ID = 'xai';\nconst XAI_BASE_URL = 'https://api.x.ai/v1';\n\n// Singleton auth storage instance (shared with claude-max.ts / github-copilot.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Build a fetch wrapper that authenticates with xAI OAuth.\n * Injects the access token (auto-refreshed by AuthStorage) as a bearer token,\n * preserving non-auth headers from the caller.\n */\nexport function buildXAIOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(XAI_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new Error('Not logged in to xAI. Run /login first.');\n    }\n\n    // getApiKey() refreshes the access token if it has expired.\n    const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);\n    if (!accessToken) {\n      throw new Error('Failed to refresh xAI token. Please /login again.');\n    }\n\n    // Preserve existing headers, strip auth-related ones. Explicit init\n    // headers override headers carried by an incoming Request.\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (init?.headers) {\n      new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    }\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n\n    try {\n      return await fetch(url, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: url instanceof URL ? url.toString() : typeof url === 'string' ? url : (url as Request).url,\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an xAI model using OAuth authentication.\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed).\n */\nexport function xaiProvider(\n  modelId: string,\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const provider = createOpenAICompatible({\n    name: XAI_PROVIDER_ID,\n    baseURL: XAI_BASE_URL,\n    apiKey: 'oauth-placeholder', // real auth injected by the custom fetch\n    headers: options?.headers,\n    fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage }),\n  });\n  return provider.chatModel(modelId);\n}\n"],"mappings":";;;;;;;;;;;;AAeA,MAAM,kBAAkB;AACxB,MAAM,eAAe;AAGrB,IAAI,sBAA0C;;AAG9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;AAGA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;;AAOA,SAAgB,mBAAmB,OAA0C,CAAC,GAAiB;CAC7F,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAEf,MAAM,OAAO,QAAQ,IAAI,eAAe;EACxC,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,MAAM,yCAAyC;EAI3D,MAAM,cAAc,MAAM,QAAQ,UAAU,eAAe;EAC3D,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,mDAAmD;EAKrE,MAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,KAAA,CAAS;EAC5E,IAAI,MAAM,SACR,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAE3E,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAE1B,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EAEpD,IAAI;GACF,OAAO,MAAM,MAAM,KAAK;IAAE,GAAG;IAAM;GAAQ,CAAC;EAC9C,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,IACrG,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;;;AAMA,SAAgB,YACd,SACA,SACmB;CAQnB,OAPiB,uBAAuB;EACtC,MAAM;EACN,SAAS;EACT,QAAQ;EACR,SAAS,SAAS;EAClB,OAAO,mBAAmB,EAAE,aAAa,SAAS,YAAY,CAAC;CACjE,CACc,CAAC,CAAC,UAAU,OAAO;AACnC"}

package/dist/schema.d.ts

@@ -0,0 +1,192 @@
+import { z } from 'zod';
+export type PermissionPolicy = 'allow' | 'ask' | 'deny';
+export type MastraCodeSessionState = {
+    currentModelId: string;
+    modeId: string;
+};
+export type MastraCodeComposedState = MastraCodeState & MastraCodeSessionState;
+export interface MastraCodeState {
+    [key: string]: unknown;
+    [key: `subagentModelId_${string}`]: string | undefined;
+    subagentModelId?: string;
+    projectPath?: string;
+    projectName?: string;
+    /** Factory project that owns this session. */
+    factoryProjectId?: string;
+    /** Linked repository used by this session when source-control execution is required. */
+    projectRepositoryId?: string;
+    /** Persisted sandbox id for reattaching the project's cloud workspace. */
+    sandboxId?: string;
+    /** Path inside the sandbox the repo is cloned into. */
+    sandboxWorkdir?: string;
+    /** Active git worktree path inside the sandbox for the current unit of work. */
+    worktreePath?: string;
+    /** Active feature branch checked out in the worktree. */
+    branch?: string;
+    /**
+     * The session's checkout contains third-party content (e.g. a PR branch
+     * under review). Project-level instruction files (AGENTS.md, CLAUDE.md)
+     * are attacker-writable there and must not be ingested into the system
+     * prompt or injected as reminders.
+     */
+    untrustedCheckout?: boolean;
+    /**
+     * Trusted git ref (typically the PR's base branch) to serve project
+     * instruction files from when the checkout is untrusted. Without it,
+     * project-scope instruction files are skipped entirely.
+     */
+    baseRef?: string;
+    /**
+     * Skip the home-directory instruction files (~/.claude/AGENTS.md and
+     * friends). Hosts running sessions for someone else set this so a run never
+     * inherits the machine owner's personal configuration.
+     */
+    skipGlobalInstructions?: boolean;
+    configDir: string;
+    homeDir?: string;
+    gitBranch?: string;
+    lastCommand?: string;
+    observerModelId: string;
+    reflectorModelId: string;
+    observationThreshold: number;
+    reflectionThreshold: number;
+    cavemanObservations: boolean;
+    observeAttachments: 'auto' | boolean;
+    omScope?: 'thread' | 'resource';
+    thinkingLevel: 'off' | 'low' | 'medium' | 'high' | 'xhigh';
+    yolo: boolean;
+    permissionRules: {
+        categories: Record<string, PermissionPolicy>;
+        tools: Record<string, PermissionPolicy>;
+    };
+    smartEditing: boolean;
+    notifications: 'bell' | 'system' | 'both' | 'off';
+    tasks: Array<{
+        id?: string;
+        content: string;
+        status: 'pending' | 'in_progress' | 'completed';
+        activeForm: string;
+    }>;
+    sandboxAllowedPaths: string[];
+    pluginSkillPaths: string[];
+    pluginCommandPaths: string[];
+    pluginInstructions: string[];
+    activePlan: {
+        title: string;
+        plan: string;
+        approvedAt: string;
+    } | null;
+    activeBrowserSettings?: {
+        enabled: boolean;
+        provider: 'stagehand' | 'agent-browser';
+        headless?: boolean;
+        viewport?: {
+            width: number;
+            height: number;
+        };
+        cdpUrl?: string;
+        stagehand?: {
+            env: 'LOCAL' | 'BROWSERBASE';
+            apiKey?: string;
+            projectId?: string;
+        };
+    };
+}
+export declare const stateSchema: z.ZodObject<{
+    currentModelId: z.ZodOptional<z.ZodString>;
+    modeId: z.ZodOptional<z.ZodString>;
+    subagentModelId: z.ZodOptional<z.ZodString>;
+    projectPath: z.ZodOptional<z.ZodString>;
+    projectName: z.ZodOptional<z.ZodString>;
+    factoryProjectId: z.ZodOptional<z.ZodString>;
+    projectRepositoryId: z.ZodOptional<z.ZodString>;
+    sandboxId: z.ZodOptional<z.ZodString>;
+    sandboxWorkdir: z.ZodOptional<z.ZodString>;
+    worktreePath: z.ZodOptional<z.ZodString>;
+    branch: z.ZodOptional<z.ZodString>;
+    untrustedCheckout: z.ZodOptional<z.ZodBoolean>;
+    baseRef: z.ZodOptional<z.ZodString>;
+    skipGlobalInstructions: z.ZodOptional<z.ZodBoolean>;
+    configDir: z.ZodDefault<z.ZodString>;
+    homeDir: z.ZodOptional<z.ZodString>;
+    gitBranch: z.ZodOptional<z.ZodString>;
+    lastCommand: z.ZodOptional<z.ZodString>;
+    observerModelId: z.ZodDefault<z.ZodString>;
+    reflectorModelId: z.ZodDefault<z.ZodString>;
+    observationThreshold: z.ZodDefault<z.ZodNumber>;
+    reflectionThreshold: z.ZodDefault<z.ZodNumber>;
+    cavemanObservations: z.ZodDefault<z.ZodBoolean>;
+    observeAttachments: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
+    omScope: z.ZodOptional<z.ZodEnum<{
+        thread: "thread";
+        resource: "resource";
+    }>>;
+    thinkingLevel: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+    }>>;
+    yolo: z.ZodDefault<z.ZodBoolean>;
+    permissionRules: z.ZodDefault<z.ZodObject<{
+        categories: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>>>;
+        tools: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>>>;
+    }, z.core.$strip>>;
+    smartEditing: z.ZodDefault<z.ZodBoolean>;
+    notifications: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        bell: "bell";
+        system: "system";
+        both: "both";
+    }>>;
+    tasks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        content: z.ZodString;
+        status: z.ZodEnum<{
+            pending: "pending";
+            in_progress: "in_progress";
+            completed: "completed";
+        }>;
+        activeForm: z.ZodString;
+    }, z.core.$strip>>>;
+    sandboxAllowedPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    pluginSkillPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    pluginCommandPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    pluginInstructions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    activePlan: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        title: z.ZodString;
+        plan: z.ZodString;
+        approvedAt: z.ZodString;
+    }, z.core.$strip>>>;
+    activeBrowserSettings: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodBoolean;
+        provider: z.ZodEnum<{
+            stagehand: "stagehand";
+            "agent-browser": "agent-browser";
+        }>;
+        headless: z.ZodOptional<z.ZodBoolean>;
+        viewport: z.ZodOptional<z.ZodObject<{
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strip>>;
+        cdpUrl: z.ZodOptional<z.ZodString>;
+        stagehand: z.ZodOptional<z.ZodObject<{
+            env: z.ZodEnum<{
+                LOCAL: "LOCAL";
+                BROWSERBASE: "BROWSERBASE";
+            }>;
+            apiKey: z.ZodOptional<z.ZodString>;
+            projectId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+//# sourceMappingURL=schema.d.ts.map