@mastra/code-sdk 1.0.3-alpha.0 → 1.1.0-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/CHANGELOG.md +49 -0
  2. package/dist/acp/agent.js +155 -167
  3. package/dist/acp/agent.js.map +1 -1
  4. package/dist/acp/event-mapper.js +193 -168
  5. package/dist/acp/event-mapper.js.map +1 -1
  6. package/dist/acp/index.js +60 -49
  7. package/dist/acp/index.js.map +1 -1
  8. package/dist/acp/server.js +31 -30
  9. package/dist/acp/server.js.map +1 -1
  10. package/dist/acp.js +1 -4
  11. package/dist/agents/credential-resolver.js +40 -29
  12. package/dist/agents/credential-resolver.js.map +1 -1
  13. package/dist/agents/custom-provider-source.js +16 -9
  14. package/dist/agents/custom-provider-source.js.map +1 -1
  15. package/dist/agents/instructions.js +27 -36
  16. package/dist/agents/instructions.js.map +1 -1
  17. package/dist/agents/mastracode-gateway.js +355 -428
  18. package/dist/agents/mastracode-gateway.js.map +1 -1
  19. package/dist/agents/memory.js +87 -78
  20. package/dist/agents/memory.js.map +1 -1
  21. package/dist/agents/model.js +114 -119
  22. package/dist/agents/model.js.map +1 -1
  23. package/dist/agents/modes/build.js +12 -13
  24. package/dist/agents/modes/build.js.map +1 -1
  25. package/dist/agents/modes/explore.js +14 -13
  26. package/dist/agents/modes/explore.js.map +1 -1
  27. package/dist/agents/modes/plan.js +14 -15
  28. package/dist/agents/modes/plan.js.map +1 -1
  29. package/dist/agents/prompts/agent-instructions.js +78 -69
  30. package/dist/agents/prompts/agent-instructions.js.map +1 -1
  31. package/dist/agents/prompts/build.js +19 -16
  32. package/dist/agents/prompts/build.js.map +1 -1
  33. package/dist/agents/prompts/fast.js +8 -4
  34. package/dist/agents/prompts/fast.js.map +1 -1
  35. package/dist/agents/prompts/index.js +48 -47
  36. package/dist/agents/prompts/index.js.map +1 -1
  37. package/dist/agents/prompts/model.js +6 -5
  38. package/dist/agents/prompts/model.js.map +1 -1
  39. package/dist/agents/prompts/plan.js +20 -16
  40. package/dist/agents/prompts/plan.js.map +1 -1
  41. package/dist/agents/prompts/tool-guidance.js +77 -109
  42. package/dist/agents/prompts/tool-guidance.js.map +1 -1
  43. package/dist/agents/sandbox-filesystem.js +245 -259
  44. package/dist/agents/sandbox-filesystem.js.map +1 -1
  45. package/dist/agents/sandbox-reattach.js +9 -11
  46. package/dist/agents/sandbox-reattach.js.map +1 -1
  47. package/dist/agents/thread-caveman-state.js +92 -81
  48. package/dist/agents/thread-caveman-state.js.map +1 -1
  49. package/dist/agents/tool-availability.js +62 -80
  50. package/dist/agents/tool-availability.js.map +1 -1
  51. package/dist/agents/tools.js +99 -139
  52. package/dist/agents/tools.js.map +1 -1
  53. package/dist/agents/workspace.js +232 -225
  54. package/dist/agents/workspace.js.map +1 -1
  55. package/dist/analytics.js +139 -128
  56. package/dist/analytics.js.map +1 -1
  57. package/dist/auth/authorization-input.js +39 -25
  58. package/dist/auth/authorization-input.js.map +1 -1
  59. package/dist/auth/device-code.js +112 -80
  60. package/dist/auth/device-code.js.map +1 -1
  61. package/dist/auth/index.js +2 -9
  62. package/dist/auth/pkce.js +27 -16
  63. package/dist/auth/pkce.js.map +1 -1
  64. package/dist/auth/providers/anthropic.js +107 -93
  65. package/dist/auth/providers/anthropic.js.map +1 -1
  66. package/dist/auth/providers/github-copilot.js +304 -293
  67. package/dist/auth/providers/github-copilot.js.map +1 -1
  68. package/dist/auth/providers/openai-codex.js +442 -460
  69. package/dist/auth/providers/openai-codex.js.map +1 -1
  70. package/dist/auth/providers/xai.js +179 -145
  71. package/dist/auth/providers/xai.js.map +1 -1
  72. package/dist/auth/storage.js +182 -175
  73. package/dist/auth/storage.js.map +1 -1
  74. package/dist/auth/types.js +1 -1
  75. package/dist/clipboard/index.js +206 -172
  76. package/dist/clipboard/index.js.map +1 -1
  77. package/dist/constants.js +11 -16
  78. package/dist/constants.js.map +1 -1
  79. package/dist/error-classification.js +19 -11
  80. package/dist/error-classification.js.map +1 -1
  81. package/dist/evals/context-builder.js +145 -104
  82. package/dist/evals/context-builder.js.map +1 -1
  83. package/dist/evals/index.js +4 -7
  84. package/dist/evals/scorers/classify-command.js +62 -41
  85. package/dist/evals/scorers/classify-command.js.map +1 -1
  86. package/dist/evals/scorers/efficiency.js +239 -181
  87. package/dist/evals/scorers/efficiency.js.map +1 -1
  88. package/dist/evals/scorers/extract-tools.js +51 -47
  89. package/dist/evals/scorers/extract-tools.js.map +1 -1
  90. package/dist/evals/scorers/index.js +1 -5
  91. package/dist/evals/scorers/outcome.js +321 -212
  92. package/dist/evals/scorers/outcome.js.map +1 -1
  93. package/dist/goal-manager.js +266 -261
  94. package/dist/goal-manager.js.map +1 -1
  95. package/dist/goal-signal.js +14 -13
  96. package/dist/goal-signal.js.map +1 -1
  97. package/dist/headless/cli.js +153 -154
  98. package/dist/headless/cli.js.map +1 -1
  99. package/dist/headless/flags.js +180 -178
  100. package/dist/headless/flags.js.map +1 -1
  101. package/dist/headless/format.js +72 -71
  102. package/dist/headless/format.js.map +1 -1
  103. package/dist/headless/index.js +5 -31
  104. package/dist/headless/policy.js +35 -31
  105. package/dist/headless/policy.js.map +1 -1
  106. package/dist/headless/run-mc.js +332 -334
  107. package/dist/headless/run-mc.js.map +1 -1
  108. package/dist/headless/types.js +16 -7
  109. package/dist/headless/types.js.map +1 -1
  110. package/dist/hooks/config.js +56 -61
  111. package/dist/hooks/config.js.map +1 -1
  112. package/dist/hooks/executor.js +118 -116
  113. package/dist/hooks/executor.js.map +1 -1
  114. package/dist/hooks/index.js +4 -15
  115. package/dist/hooks/manager.js +221 -280
  116. package/dist/hooks/manager.js.map +1 -1
  117. package/dist/hooks/types.js +5 -4
  118. package/dist/hooks/types.js.map +1 -1
  119. package/dist/index.d.ts.map +1 -1
  120. package/dist/index.js +632 -712
  121. package/dist/index.js.map +1 -1
  122. package/dist/ipc/ipc-reporter.js +19 -22
  123. package/dist/ipc/ipc-reporter.js.map +1 -1
  124. package/dist/lsp/client.js +248 -306
  125. package/dist/lsp/client.js.map +1 -1
  126. package/dist/lsp/index.js +1 -6
  127. package/dist/lsp/language.js +39 -43
  128. package/dist/lsp/language.js.map +1 -1
  129. package/dist/lsp/manager.js +78 -93
  130. package/dist/lsp/manager.js.map +1 -1
  131. package/dist/lsp/server.js +151 -120
  132. package/dist/lsp/server.js.map +1 -1
  133. package/dist/lsp/workspace.js +50 -47
  134. package/dist/lsp/workspace.js.map +1 -1
  135. package/dist/mcp/config.js +210 -199
  136. package/dist/mcp/config.js.map +1 -1
  137. package/dist/mcp/index.js +2 -9
  138. package/dist/mcp/manager.js +482 -475
  139. package/dist/mcp/manager.js.map +1 -1
  140. package/dist/mcp/types.js +1 -1
  141. package/dist/onboarding/custom-packs.js +14 -17
  142. package/dist/onboarding/custom-packs.js.map +1 -1
  143. package/dist/onboarding/custom-providers.js +22 -20
  144. package/dist/onboarding/custom-providers.js.map +1 -1
  145. package/dist/onboarding/index.d.ts +1 -1
  146. package/dist/onboarding/index.d.ts.map +1 -1
  147. package/dist/onboarding/index.js +3 -21
  148. package/dist/onboarding/om-settings.d.ts +5 -0
  149. package/dist/onboarding/om-settings.d.ts.map +1 -1
  150. package/dist/onboarding/om-settings.js +41 -20
  151. package/dist/onboarding/om-settings.js.map +1 -1
  152. package/dist/onboarding/packs.d.ts +4 -6
  153. package/dist/onboarding/packs.d.ts.map +1 -1
  154. package/dist/onboarding/packs.js +154 -105
  155. package/dist/onboarding/packs.js.map +1 -1
  156. package/dist/onboarding/settings.js +575 -517
  157. package/dist/onboarding/settings.js.map +1 -1
  158. package/dist/permissions.js +112 -99
  159. package/dist/permissions.js.map +1 -1
  160. package/dist/plugin.js +21 -23
  161. package/dist/plugin.js.map +1 -1
  162. package/dist/plugins/dependencies.js +64 -87
  163. package/dist/plugins/dependencies.js.map +1 -1
  164. package/dist/plugins/install.js +159 -169
  165. package/dist/plugins/install.js.map +1 -1
  166. package/dist/plugins/loader.js +170 -185
  167. package/dist/plugins/loader.js.map +1 -1
  168. package/dist/plugins/manager.js +374 -380
  169. package/dist/plugins/manager.js.map +1 -1
  170. package/dist/plugins/manifest.js +38 -63
  171. package/dist/plugins/manifest.js.map +1 -1
  172. package/dist/plugins/package-link.js +48 -64
  173. package/dist/plugins/package-link.js.map +1 -1
  174. package/dist/plugins/paths.js +18 -19
  175. package/dist/plugins/paths.js.map +1 -1
  176. package/dist/plugins/registry.js +97 -81
  177. package/dist/plugins/registry.js.map +1 -1
  178. package/dist/plugins/scaffold.js +62 -98
  179. package/dist/plugins/scaffold.js.map +1 -1
  180. package/dist/plugins/types.js +1 -1
  181. package/dist/processors/plan-rejection-abort.js +45 -44
  182. package/dist/processors/plan-rejection-abort.js.map +1 -1
  183. package/dist/providers/amazon-bedrock-gateway.js +134 -125
  184. package/dist/providers/amazon-bedrock-gateway.js.map +1 -1
  185. package/dist/providers/amazon-bedrock.js +68 -47
  186. package/dist/providers/amazon-bedrock.js.map +1 -1
  187. package/dist/providers/claude-max.js +153 -133
  188. package/dist/providers/claude-max.js.map +1 -1
  189. package/dist/providers/github-copilot.js +232 -230
  190. package/dist/providers/github-copilot.js.map +1 -1
  191. package/dist/providers/openai-codex.js +271 -260
  192. package/dist/providers/openai-codex.js.map +1 -1
  193. package/dist/providers/xai.js +57 -50
  194. package/dist/providers/xai.js.map +1 -1
  195. package/dist/schema.js +91 -89
  196. package/dist/schema.js.map +1 -1
  197. package/dist/theme-palette.js +18 -14
  198. package/dist/theme-palette.js.map +1 -1
  199. package/dist/tool-names.js +46 -37
  200. package/dist/tool-names.js.map +1 -1
  201. package/dist/tools/index.js +2 -8
  202. package/dist/tools/request-sandbox-access.js +71 -80
  203. package/dist/tools/request-sandbox-access.js.map +1 -1
  204. package/dist/tools/utils.js +26 -16
  205. package/dist/tools/utils.js.map +1 -1
  206. package/dist/tools/web-search.js +51 -55
  207. package/dist/tools/web-search.js.map +1 -1
  208. package/dist/utils/binaries.js +65 -61
  209. package/dist/utils/binaries.js.map +1 -1
  210. package/dist/utils/debug-log.js +51 -47
  211. package/dist/utils/debug-log.js.map +1 -1
  212. package/dist/utils/errors.js +157 -192
  213. package/dist/utils/errors.js.map +1 -1
  214. package/dist/utils/gateway-sync.js +49 -37
  215. package/dist/utils/gateway-sync.js.map +1 -1
  216. package/dist/utils/path-security.js +7 -6
  217. package/dist/utils/path-security.js.map +1 -1
  218. package/dist/utils/plan-diff.js +58 -39
  219. package/dist/utils/plan-diff.js.map +1 -1
  220. package/dist/utils/plans.js +92 -74
  221. package/dist/utils/plans.js.map +1 -1
  222. package/dist/utils/project.js +318 -256
  223. package/dist/utils/project.js.map +1 -1
  224. package/dist/utils/signals-pubsub.js +117 -99
  225. package/dist/utils/signals-pubsub.js.map +1 -1
  226. package/dist/utils/slash-command-loader.js +118 -154
  227. package/dist/utils/slash-command-loader.js.map +1 -1
  228. package/dist/utils/slash-command-processor.js +92 -83
  229. package/dist/utils/slash-command-processor.js.map +1 -1
  230. package/dist/utils/stdin-pipe.js +87 -63
  231. package/dist/utils/stdin-pipe.js.map +1 -1
  232. package/dist/utils/storage-factory.js +104 -84
  233. package/dist/utils/storage-factory.js.map +1 -1
  234. package/dist/utils/storage-maintenance.js +249 -211
  235. package/dist/utils/storage-maintenance.js.map +1 -1
  236. package/dist/utils/thread-lock.js +96 -92
  237. package/dist/utils/thread-lock.js.map +1 -1
  238. package/dist/utils/token-estimator.js +12 -12
  239. package/dist/utils/token-estimator.js.map +1 -1
  240. package/dist/utils/update-check.d.ts +1 -1
  241. package/dist/utils/update-check.js +341 -259
  242. package/dist/utils/update-check.js.map +1 -1
  243. package/dist/voice/stt-registry.js +131 -113
  244. package/dist/voice/stt-registry.js.map +1 -1
  245. package/package.json +11 -11
  246. package/dist/acp.js.map +0 -1
  247. package/dist/auth/index.js.map +0 -1
  248. package/dist/auth/types.js.map +0 -1
  249. package/dist/evals/index.js.map +0 -1
  250. package/dist/evals/scorers/index.js.map +0 -1
  251. package/dist/headless/index.js.map +0 -1
  252. package/dist/hooks/index.js.map +0 -1
  253. package/dist/lsp/index.js.map +0 -1
  254. package/dist/mcp/index.js.map +0 -1
  255. package/dist/mcp/types.js.map +0 -1
  256. package/dist/onboarding/index.js.map +0 -1
  257. package/dist/plugins/types.js.map +0 -1
  258. package/dist/tools/index.js.map +0 -1
@@ -1,291 +1,302 @@
1
+ import { AuthStorage } from "../auth/storage.js";
1
2
  import { createOpenAI } from "@ai-sdk/openai";
2
3
  import { wrapLanguageModel } from "ai";
3
- import { AuthStorage } from "../auth/storage.js";
4
+ //#region src/providers/openai-codex.ts
5
+ /**
6
+ * OpenAI Codex OAuth Provider
7
+ *
8
+ * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.
9
+ * This allows access to OpenAI models through the ChatGPT OAuth flow.
10
+ *
11
+ * Inspired by opencode's Codex plugin implementation:
12
+ * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts
13
+ */
4
14
  const CODEX_API_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
5
15
  const CODEX_ORIGINATOR = "mastracode";
6
16
  const CODEX_USER_AGENT = "mastracode";
7
17
  let authStorageInstance = null;
18
+ /**
19
+ * Get or create the shared AuthStorage instance
20
+ */
8
21
  function getAuthStorage() {
9
- if (!authStorageInstance) {
10
- authStorageInstance = new AuthStorage();
11
- }
12
- return authStorageInstance;
22
+ if (!authStorageInstance) authStorageInstance = new AuthStorage();
23
+ return authStorageInstance;
13
24
  }
25
+ /**
26
+ * Set a custom AuthStorage instance (useful for TUI integration)
27
+ */
14
28
  function setAuthStorage(storage) {
15
- authStorageInstance = storage ?? null;
29
+ authStorageInstance = storage ?? null;
16
30
  }
17
31
  const CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.
18
32
 
19
33
  IMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;
20
34
  const GPT5_MODEL_RE = /^gpt-5(?:\.|-|$)/;
21
35
  function getEffectiveThinkingLevel(modelId, level) {
22
- if (GPT5_MODEL_RE.test(modelId) && level === "off") {
23
- return "low";
24
- }
25
- return level;
36
+ if (GPT5_MODEL_RE.test(modelId) && level === "off") return "low";
37
+ return level;
26
38
  }
27
39
  const THINKING_LEVEL_TO_REASONING_EFFORT = {
28
- off: void 0,
29
- low: "low",
30
- medium: "medium",
31
- high: "high",
32
- xhigh: "xhigh"
40
+ off: void 0,
41
+ low: "low",
42
+ medium: "medium",
43
+ high: "high",
44
+ xhigh: "xhigh"
33
45
  };
46
+ /**
47
+ * Create Codex middleware with the given reasoning effort level.
48
+ */
34
49
  function createCodexMiddleware(reasoningEffort) {
35
- return {
36
- specificationVersion: "v3",
37
- transformParams: async ({ params }) => {
38
- if (params.temperature !== void 0 && params.temperature !== null) {
39
- delete params.topP;
40
- }
41
- params.providerOptions = {
42
- ...params.providerOptions,
43
- openai: {
44
- ...params.providerOptions?.openai ?? {},
45
- instructions: CODEX_INSTRUCTIONS,
46
- // Codex API requires store to be false
47
- store: false,
48
- // Enable reasoning for Codex models — without this, the model
49
- // skips the reasoning/action phase and goes straight to final_answer,
50
- // resulting in narration instead of tool calls.
51
- ...reasoningEffort ? { reasoningEffort } : {}
52
- }
53
- };
54
- return params;
55
- }
56
- };
50
+ return {
51
+ specificationVersion: "v3",
52
+ transformParams: async ({ params }) => {
53
+ if (params.temperature !== void 0 && params.temperature !== null) delete params.topP;
54
+ params.providerOptions = {
55
+ ...params.providerOptions,
56
+ openai: {
57
+ ...params.providerOptions?.openai ?? {},
58
+ instructions: CODEX_INSTRUCTIONS,
59
+ store: false,
60
+ ...reasoningEffort ? { reasoningEffort } : {}
61
+ }
62
+ };
63
+ return params;
64
+ }
65
+ };
57
66
  }
67
+ /**
68
+ * Get a live OAuth bearer token for the Codex OAuth credential.
69
+ *
70
+ * Refreshes the token if it's expired, and returns the credential's
71
+ * accountId alongside the access token. Throws if the user isn't logged in
72
+ * or if the refresh fails.
73
+ *
74
+ * This is the only piece of Codex auth that is genuinely shared between
75
+ * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand
76
+ * fetch (`buildCodexStagehandFetch`).
77
+ */
58
78
  async function getCodexBearer(authStorage) {
59
- const storage = authStorage ?? getAuthStorage();
60
- storage.reload();
61
- const cred = storage.get("openai-codex");
62
- if (!cred || cred.type !== "oauth") {
63
- throw new Error("Not logged in to OpenAI Codex. Run /login first.");
64
- }
65
- let accessToken = cred.access;
66
- if (Date.now() >= cred.expires) {
67
- const refreshedToken = await storage.getApiKey("openai-codex");
68
- if (!refreshedToken) {
69
- throw new Error("Failed to refresh OpenAI Codex token. Please /login again.");
70
- }
71
- accessToken = refreshedToken;
72
- storage.reload();
73
- }
74
- return { accessToken, accountId: cred.accountId };
79
+ const storage = authStorage ?? getAuthStorage();
80
+ storage.reload();
81
+ const cred = storage.get("openai-codex");
82
+ if (!cred || cred.type !== "oauth") throw new Error("Not logged in to OpenAI Codex. Run /login first.");
83
+ let accessToken = cred.access;
84
+ if (Date.now() >= cred.expires) {
85
+ const refreshedToken = await storage.getApiKey("openai-codex");
86
+ if (!refreshedToken) throw new Error("Failed to refresh OpenAI Codex token. Please /login again.");
87
+ accessToken = refreshedToken;
88
+ storage.reload();
89
+ }
90
+ return {
91
+ accessToken,
92
+ accountId: cred.accountId
93
+ };
75
94
  }
95
+ /**
96
+ * Build a fetch function that handles OpenAI Codex OAuth.
97
+ * Preserves non-authorization headers from init.
98
+ * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions
99
+ * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the
100
+ * SDK already targets the correct URL.
101
+ */
76
102
  function buildOpenAICodexOAuthFetch(opts = {}) {
77
- return (async (url, init) => {
78
- const { accessToken, accountId } = await getCodexBearer(opts.authStorage);
79
- const headers = new Headers();
80
- if (init?.headers) {
81
- if (init.headers instanceof Headers) {
82
- init.headers.forEach((value, key) => {
83
- if (key.toLowerCase() !== "authorization") {
84
- headers.set(key, value);
85
- }
86
- });
87
- } else if (Array.isArray(init.headers)) {
88
- for (const [key, value] of init.headers) {
89
- if (key.toLowerCase() !== "authorization" && value !== void 0) {
90
- headers.set(key, String(value));
91
- }
92
- }
93
- } else {
94
- for (const [key, value] of Object.entries(init.headers)) {
95
- if (key.toLowerCase() !== "authorization" && value !== void 0) {
96
- headers.set(key, String(value));
97
- }
98
- }
99
- }
100
- }
101
- headers.set("Authorization", `Bearer ${accessToken}`);
102
- if (!headers.has("originator")) {
103
- headers.set("originator", CODEX_ORIGINATOR);
104
- }
105
- if (!headers.has("User-Agent")) {
106
- headers.set("User-Agent", CODEX_USER_AGENT);
107
- }
108
- if (accountId) {
109
- headers.set("ChatGPT-Account-ID", accountId);
110
- }
111
- const parsed = url instanceof URL ? url : new URL(typeof url === "string" ? url : url.url);
112
- const shouldRewrite = opts.rewriteUrl !== false && (parsed.pathname.includes("/v1/responses") || parsed.pathname.includes("/chat/completions"));
113
- const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;
114
- try {
115
- return await fetch(finalUrl, { ...init, headers });
116
- } catch (error) {
117
- if (error && typeof error === "object") {
118
- Object.assign(error, {
119
- requestUrl: finalUrl.toString()
120
- });
121
- }
122
- throw error;
123
- }
124
- });
103
+ return (async (url, init) => {
104
+ const { accessToken, accountId } = await getCodexBearer(opts.authStorage);
105
+ const headers = new Headers();
106
+ if (init?.headers) {
107
+ if (init.headers instanceof Headers) init.headers.forEach((value, key) => {
108
+ if (key.toLowerCase() !== "authorization") headers.set(key, value);
109
+ });
110
+ else if (Array.isArray(init.headers)) {
111
+ for (const [key, value] of init.headers) if (key.toLowerCase() !== "authorization" && value !== void 0) headers.set(key, String(value));
112
+ } else for (const [key, value] of Object.entries(init.headers)) if (key.toLowerCase() !== "authorization" && value !== void 0) headers.set(key, String(value));
113
+ }
114
+ headers.set("Authorization", `Bearer ${accessToken}`);
115
+ if (!headers.has("originator")) headers.set("originator", CODEX_ORIGINATOR);
116
+ if (!headers.has("User-Agent")) headers.set("User-Agent", CODEX_USER_AGENT);
117
+ if (accountId) headers.set("ChatGPT-Account-ID", accountId);
118
+ const parsed = url instanceof URL ? url : new URL(typeof url === "string" ? url : url.url);
119
+ const finalUrl = opts.rewriteUrl !== false && (parsed.pathname.includes("/v1/responses") || parsed.pathname.includes("/chat/completions")) ? new URL(CODEX_API_ENDPOINT) : parsed;
120
+ try {
121
+ return await fetch(finalUrl, {
122
+ ...init,
123
+ headers
124
+ });
125
+ } catch (error) {
126
+ if (error && typeof error === "object") Object.assign(error, { requestUrl: finalUrl.toString() });
127
+ throw error;
128
+ }
129
+ });
125
130
  }
131
+ /**
132
+ * Build a fetch function for Stagehand-on-Codex.
133
+ *
134
+ * The Codex backend has two requirements that AI SDK's non-streaming
135
+ * `generateText` path doesn't naturally satisfy:
136
+ *
137
+ * 1. `stream: true` must be set on every request body.
138
+ * 2. The response is delivered as Server-Sent Events; AI SDK's
139
+ * non-streaming code path expects a single JSON body.
140
+ *
141
+ * This fetch forces streaming on the outgoing request, collects the SSE
142
+ * events, and synthesizes the non-streaming JSON shape that
143
+ * `@ai-sdk/openai`'s Responses API parser expects.
144
+ *
145
+ * Headers, OAuth refresh, and URL targeting are handled by the caller via
146
+ * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the
147
+ * live OAuth bearer per call.
148
+ */
126
149
  function buildCodexStagehandFetch(authStorage) {
127
- return (async (url, init) => {
128
- const { accessToken } = await getCodexBearer(authStorage);
129
- const headers = new Headers(init?.headers);
130
- headers.set("Authorization", `Bearer ${accessToken}`);
131
- headers.set("Accept", "text/event-stream");
132
- let body = init?.body;
133
- if (typeof init?.body === "string") {
134
- try {
135
- const parsed = JSON.parse(init.body);
136
- parsed.stream = true;
137
- body = JSON.stringify(parsed);
138
- if (!headers.has("content-type")) headers.set("content-type", "application/json");
139
- } catch {
140
- }
141
- }
142
- const upstream = await fetch(url, { ...init, headers, body });
143
- if (!upstream.ok) return upstream;
144
- const aggregated = await aggregateCodexStream(upstream);
145
- return new Response(aggregated, {
146
- status: 200,
147
- headers: { "content-type": "application/json" }
148
- });
149
- });
150
+ return (async (url, init) => {
151
+ const { accessToken } = await getCodexBearer(authStorage);
152
+ const headers = new Headers(init?.headers);
153
+ headers.set("Authorization", `Bearer ${accessToken}`);
154
+ headers.set("Accept", "text/event-stream");
155
+ let body = init?.body;
156
+ if (typeof init?.body === "string") try {
157
+ const parsed = JSON.parse(init.body);
158
+ parsed.stream = true;
159
+ body = JSON.stringify(parsed);
160
+ if (!headers.has("content-type")) headers.set("content-type", "application/json");
161
+ } catch {}
162
+ const upstream = await fetch(url, {
163
+ ...init,
164
+ headers,
165
+ body
166
+ });
167
+ if (!upstream.ok) return upstream;
168
+ const aggregated = await aggregateCodexStream(upstream);
169
+ return new Response(aggregated, {
170
+ status: 200,
171
+ headers: { "content-type": "application/json" }
172
+ });
173
+ });
150
174
  }
175
+ /**
176
+ * Read an SSE Response and reduce it to a single JSON string matching the
177
+ * non-streaming OpenAI Responses-API shape.
178
+ *
179
+ * Event vocabulary we care about (per OpenAI Responses API streaming):
180
+ * - response.created → carries `response` object (id, model, usage stub)
181
+ * - response.output_item.added/done → output items (message, reasoning, etc.)
182
+ * - response.output_text.delta → text chunks
183
+ * - response.completed → final `response` snapshot incl. usage
184
+ * - response.error / error → bubble up as a thrown body
185
+ *
186
+ * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored
187
+ * for the non-streaming text response.
188
+ */
151
189
  async function aggregateCodexStream(response) {
152
- if (!response.body) {
153
- throw new Error("Codex streaming response had no body");
154
- }
155
- const reader = response.body.getReader();
156
- const decoder = new TextDecoder("utf-8");
157
- let buffer = "";
158
- let finalResponse = null;
159
- let createdResponse = null;
160
- const items = /* @__PURE__ */ new Map();
161
- const textBuffers = /* @__PURE__ */ new Map();
162
- const handleEvent = (event) => {
163
- if (!event.data || event.data === "[DONE]") return;
164
- let payload;
165
- try {
166
- payload = JSON.parse(event.data);
167
- } catch {
168
- return;
169
- }
170
- const type = payload.type ?? event.event ?? "";
171
- switch (type) {
172
- case "response.created": {
173
- createdResponse = payload.response ?? createdResponse;
174
- break;
175
- }
176
- case "response.output_item.added": {
177
- if (typeof payload.output_index === "number" && payload.item) {
178
- items.set(payload.output_index, payload.item);
179
- }
180
- break;
181
- }
182
- case "response.output_item.done": {
183
- if (typeof payload.output_index === "number" && payload.item) {
184
- items.set(payload.output_index, payload.item);
185
- }
186
- break;
187
- }
188
- case "response.output_text.delta": {
189
- const key = `${payload.output_index}:${payload.content_index ?? 0}`;
190
- textBuffers.set(key, (textBuffers.get(key) ?? "") + (payload.delta ?? ""));
191
- break;
192
- }
193
- case "response.completed": {
194
- finalResponse = payload.response ?? finalResponse;
195
- break;
196
- }
197
- case "response.error":
198
- case "error": {
199
- throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);
200
- }
201
- default:
202
- break;
203
- }
204
- };
205
- const processChunk = (chunk) => {
206
- buffer += chunk.replace(/\r\n/g, "\n");
207
- let sepIdx;
208
- while ((sepIdx = buffer.indexOf("\n\n")) !== -1) {
209
- const raw = buffer.slice(0, sepIdx);
210
- buffer = buffer.slice(sepIdx + 2);
211
- const event = {};
212
- const dataLines = [];
213
- for (const line of raw.split("\n")) {
214
- if (line.startsWith("event:")) {
215
- event.event = line.slice(6).trim();
216
- } else if (line.startsWith("data:")) {
217
- dataLines.push(line.slice(5).trimStart());
218
- }
219
- }
220
- if (dataLines.length > 0) {
221
- event.data = dataLines.join("\n");
222
- }
223
- handleEvent(event);
224
- }
225
- };
226
- try {
227
- while (true) {
228
- const { value, done } = await reader.read();
229
- if (done) break;
230
- processChunk(decoder.decode(value, { stream: true }));
231
- }
232
- processChunk(decoder.decode());
233
- } finally {
234
- reader.releaseLock();
235
- }
236
- const base = finalResponse ?? createdResponse ?? { output: [] };
237
- const finalItems = Array.from(items.entries()).sort(([a], [b]) => a - b).map(([index, item]) => {
238
- if (item?.type === "message" && Array.isArray(item.content)) {
239
- item.content = item.content.map((c, ci) => {
240
- const key = `${index}:${ci}`;
241
- if (textBuffers.has(key)) {
242
- return { ...c, text: textBuffers.get(key) };
243
- }
244
- return c;
245
- });
246
- }
247
- return item;
248
- });
249
- base.output = finalItems.length > 0 ? finalItems : base.output ?? [];
250
- return JSON.stringify(base);
190
+ if (!response.body) throw new Error("Codex streaming response had no body");
191
+ const reader = response.body.getReader();
192
+ const decoder = new TextDecoder("utf-8");
193
+ let buffer = "";
194
+ let finalResponse = null;
195
+ let createdResponse = null;
196
+ const items = /* @__PURE__ */ new Map();
197
+ const textBuffers = /* @__PURE__ */ new Map();
198
+ const handleEvent = (event) => {
199
+ if (!event.data || event.data === "[DONE]") return;
200
+ let payload;
201
+ try {
202
+ payload = JSON.parse(event.data);
203
+ } catch {
204
+ return;
205
+ }
206
+ switch (payload.type ?? event.event ?? "") {
207
+ case "response.created":
208
+ createdResponse = payload.response ?? createdResponse;
209
+ break;
210
+ case "response.output_item.added":
211
+ if (typeof payload.output_index === "number" && payload.item) items.set(payload.output_index, payload.item);
212
+ break;
213
+ case "response.output_item.done":
214
+ if (typeof payload.output_index === "number" && payload.item) items.set(payload.output_index, payload.item);
215
+ break;
216
+ case "response.output_text.delta": {
217
+ const key = `${payload.output_index}:${payload.content_index ?? 0}`;
218
+ textBuffers.set(key, (textBuffers.get(key) ?? "") + (payload.delta ?? ""));
219
+ break;
220
+ }
221
+ case "response.completed":
222
+ finalResponse = payload.response ?? finalResponse;
223
+ break;
224
+ case "response.error":
225
+ case "error": throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);
226
+ default: break;
227
+ }
228
+ };
229
+ const processChunk = (chunk) => {
230
+ buffer += chunk.replace(/\r\n/g, "\n");
231
+ let sepIdx;
232
+ while ((sepIdx = buffer.indexOf("\n\n")) !== -1) {
233
+ const raw = buffer.slice(0, sepIdx);
234
+ buffer = buffer.slice(sepIdx + 2);
235
+ const event = {};
236
+ const dataLines = [];
237
+ for (const line of raw.split("\n")) if (line.startsWith("event:")) event.event = line.slice(6).trim();
238
+ else if (line.startsWith("data:")) dataLines.push(line.slice(5).trimStart());
239
+ if (dataLines.length > 0) event.data = dataLines.join("\n");
240
+ handleEvent(event);
241
+ }
242
+ };
243
+ try {
244
+ while (true) {
245
+ const { value, done } = await reader.read();
246
+ if (done) break;
247
+ processChunk(decoder.decode(value, { stream: true }));
248
+ }
249
+ processChunk(decoder.decode());
250
+ } finally {
251
+ reader.releaseLock();
252
+ }
253
+ const base = finalResponse ?? createdResponse ?? { output: [] };
254
+ const finalItems = Array.from(items.entries()).sort(([a], [b]) => a - b).map(([index, item]) => {
255
+ if (item?.type === "message" && Array.isArray(item.content)) item.content = item.content.map((c, ci) => {
256
+ const key = `${index}:${ci}`;
257
+ if (textBuffers.has(key)) return {
258
+ ...c,
259
+ text: textBuffers.get(key)
260
+ };
261
+ return c;
262
+ });
263
+ return item;
264
+ });
265
+ base.output = finalItems.length > 0 ? finalItems : base.output ?? [];
266
+ return JSON.stringify(base);
251
267
  }
268
+ /**
269
+ * Creates an OpenAI model using ChatGPT OAuth authentication
270
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)
271
+ *
272
+ * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.
273
+ * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.
274
+ */
252
275
  function openaiCodexProvider(modelId = "codex-mini-latest", options) {
253
- const requestedLevel = options?.thinkingLevel ?? "medium";
254
- const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);
255
- const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];
256
- const middleware = createCodexMiddleware(reasoningEffort);
257
- const headers = options?.headers;
258
- const baseURL = process.env.OPENAI_BASE_URL;
259
- if (process.env.NODE_ENV === "test" || process.env.VITEST) {
260
- const openai2 = createOpenAI({
261
- apiKey: "test-api-key",
262
- baseURL,
263
- headers
264
- });
265
- return wrapLanguageModel({
266
- model: openai2.responses(modelId),
267
- middleware: [middleware]
268
- });
269
- }
270
- const openai = createOpenAI({
271
- apiKey: "oauth-dummy-key",
272
- baseURL,
273
- headers,
274
- fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage })
275
- });
276
- return wrapLanguageModel({
277
- model: openai.responses(modelId),
278
- middleware: [middleware]
279
- });
276
+ const effectiveLevel = getEffectiveThinkingLevel(modelId, options?.thinkingLevel ?? "medium");
277
+ const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];
278
+ const middleware = createCodexMiddleware(reasoningEffort);
279
+ const headers = options?.headers;
280
+ const baseURL = process.env.OPENAI_BASE_URL;
281
+ if (process.env.NODE_ENV === "test" || process.env.VITEST) return wrapLanguageModel({
282
+ model: createOpenAI({
283
+ apiKey: "test-api-key",
284
+ baseURL,
285
+ headers
286
+ }).responses(modelId),
287
+ middleware: [middleware]
288
+ });
289
+ return wrapLanguageModel({
290
+ model: createOpenAI({
291
+ apiKey: "oauth-dummy-key",
292
+ baseURL,
293
+ headers,
294
+ fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage })
295
+ }).responses(modelId),
296
+ middleware: [middleware]
297
+ });
280
298
  }
281
- export {
282
- THINKING_LEVEL_TO_REASONING_EFFORT,
283
- buildCodexStagehandFetch,
284
- buildOpenAICodexOAuthFetch,
285
- createCodexMiddleware,
286
- getAuthStorage,
287
- getEffectiveThinkingLevel,
288
- openaiCodexProvider,
289
- setAuthStorage
290
- };
299
+ //#endregion
300
+ export { THINKING_LEVEL_TO_REASONING_EFFORT, buildCodexStagehandFetch, buildOpenAICodexOAuthFetch, createCodexMiddleware, getAuthStorage, getEffectiveThinkingLevel, openaiCodexProvider, setAuthStorage };
301
+
291
302
  //# sourceMappingURL=openai-codex.js.map