@mastra/code-sdk 1.0.3-alpha.0 → 1.1.0-alpha.2

package/dist/providers/openai-codex.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/openai-codex.ts"],"sourcesContent":["/**\n * OpenAI Codex OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.\n * This allows access to OpenAI models through the ChatGPT OAuth flow.\n *\n * Inspired by opencode's Codex plugin implementation:\n * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts\n */\n\nimport { createOpenAI } from '@ai-sdk/openai';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\n// Codex API endpoint (not standard OpenAI API)\nconst CODEX_API_ENDPOINT = 'https://chatgpt.com/backend-api/codex/responses';\nconst CODEX_ORIGINATOR = 'mastracode';\nconst CODEX_USER_AGENT = 'mastracode';\n\n// Singleton auth storage instance (shared with claude-max.ts)\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n// Default instructions for Codex API (required)\nconst CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nIMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;\n\n/** Valid thinking level values. */\nexport type ThinkingLevel = 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n\nconst GPT5_MODEL_RE = /^gpt-5(?:\\.|-|$)/;\n\nexport function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  // GPT-5.* models on Codex require at least low reasoning.\n  if (GPT5_MODEL_RE.test(modelId) && level === 'off') {\n    return 'low';\n  }\n\n  return level;\n}\n\n// Map thinkingLevel state values to OpenAI reasoningEffort values.\n// undefined means omit the parameter (no reasoning).\nexport const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined> = {\n  off: undefined,\n  low: 'low',\n  medium: 'medium',\n  high: 'high',\n  xhigh: 'xhigh',\n};\n\n/**\n * Create Codex middleware with the given reasoning effort level.\n */\nexport function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      // Remove topP if temperature is set (OpenAI doesn't like both)\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      // Codex API requires specific settings via providerOptions\n      // Use type assertion to satisfy JSONValue constraints\n      params.providerOptions = {\n        ...params.providerOptions,\n        openai: {\n          ...(params.providerOptions?.openai ?? {}),\n          instructions: CODEX_INSTRUCTIONS,\n          // Codex API requires store to be false\n          store: false,\n          // Enable reasoning for Codex models — without this, the model\n          // skips the reasoning/action phase and goes straight to final_answer,\n          // resulting in narration instead of tool calls.\n          ...(reasoningEffort ? { reasoningEffort } : {}),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Get a live OAuth bearer token for the Codex OAuth credential.\n *\n * Refreshes the token if it's expired, and returns the credential's\n * accountId alongside the access token. Throws if the user isn't logged in\n * or if the refresh fails.\n *\n * This is the only piece of Codex auth that is genuinely shared between\n * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand\n * fetch (`buildCodexStagehandFetch`).\n */\nasync function getCodexBearer(\n  authStorage?: CredentialStore,\n): Promise<{ accessToken: string; accountId: string | undefined }> {\n  const storage = authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get('openai-codex');\n  if (!cred || cred.type !== 'oauth') {\n    throw new Error('Not logged in to OpenAI Codex. Run /login first.');\n  }\n\n  let accessToken = cred.access;\n  if (Date.now() >= cred.expires) {\n    const refreshedToken = await storage.getApiKey('openai-codex');\n    if (!refreshedToken) {\n      throw new Error('Failed to refresh OpenAI Codex token. Please /login again.');\n    }\n    accessToken = refreshedToken;\n    storage.reload();\n  }\n\n  return { accessToken, accountId: (cred as any).accountId as string | undefined };\n}\n\n/**\n * Build a fetch function that handles OpenAI Codex OAuth.\n * Preserves non-authorization headers from init.\n * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions\n * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the\n * SDK already targets the correct URL.\n */\nexport function buildOpenAICodexOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { accessToken, accountId } = await getCodexBearer(opts.authStorage);\n\n    // Preserve non-authorization headers\n    const headers = new Headers();\n    if (init?.headers) {\n      if (init.headers instanceof Headers) {\n        init.headers.forEach((value, key) => {\n          if (key.toLowerCase() !== 'authorization') {\n            headers.set(key, value);\n          }\n        });\n      } else if (Array.isArray(init.headers)) {\n        for (const [key, value] of init.headers) {\n          if (key!.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key!, String(value));\n          }\n        }\n      } else {\n        for (const [key, value] of Object.entries(init.headers)) {\n          if (key.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key, String(value));\n          }\n        }\n      }\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    if (!headers.has('originator')) {\n      headers.set('originator', CODEX_ORIGINATOR);\n    }\n    if (!headers.has('User-Agent')) {\n      headers.set('User-Agent', CODEX_USER_AGENT);\n    }\n    if (accountId) {\n      headers.set('ChatGPT-Account-ID', accountId);\n    }\n\n    // URL rewriting — only when rewriteUrl !== false\n    const parsed = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n    const shouldRewrite =\n      opts.rewriteUrl !== false &&\n      (parsed.pathname.includes('/v1/responses') || parsed.pathname.includes('/chat/completions'));\n    const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Build a fetch function for Stagehand-on-Codex.\n *\n * The Codex backend has two requirements that AI SDK's non-streaming\n * `generateText` path doesn't naturally satisfy:\n *\n *   1. `stream: true` must be set on every request body.\n *   2. The response is delivered as Server-Sent Events; AI SDK's\n *      non-streaming code path expects a single JSON body.\n *\n * This fetch forces streaming on the outgoing request, collects the SSE\n * events, and synthesizes the non-streaming JSON shape that\n * `@ai-sdk/openai`'s Responses API parser expects.\n *\n * Headers, OAuth refresh, and URL targeting are handled by the caller via\n * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the\n * live OAuth bearer per call.\n */\nexport function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    // Refresh + inject the OAuth bearer per call\n    const { accessToken } = await getCodexBearer(authStorage);\n    const headers = new Headers(init?.headers);\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('Accept', 'text/event-stream');\n\n    // Force stream: true on the request body\n    type FetchBody = NonNullable<Parameters<typeof fetch>[1]>['body'];\n    let body: FetchBody | undefined = init?.body;\n    if (typeof init?.body === 'string') {\n      try {\n        const parsed = JSON.parse(init.body) as Record<string, unknown>;\n        parsed.stream = true;\n        body = JSON.stringify(parsed);\n        if (!headers.has('content-type')) headers.set('content-type', 'application/json');\n      } catch {\n        // Not JSON; leave as-is\n      }\n    }\n\n    const upstream = await fetch(url, { ...init, headers, body });\n    if (!upstream.ok) return upstream;\n\n    // Aggregate SSE -> synthesized non-streaming Response\n    const aggregated = await aggregateCodexStream(upstream);\n    return new Response(aggregated, {\n      status: 200,\n      headers: { 'content-type': 'application/json' },\n    });\n  }) as typeof fetch;\n}\n\n/**\n * Read an SSE Response and reduce it to a single JSON string matching the\n * non-streaming OpenAI Responses-API shape.\n *\n * Event vocabulary we care about (per OpenAI Responses API streaming):\n *   - response.created         → carries `response` object (id, model, usage stub)\n *   - response.output_item.added/done → output items (message, reasoning, etc.)\n *   - response.output_text.delta → text chunks\n *   - response.completed       → final `response` snapshot incl. usage\n *   - response.error / error   → bubble up as a thrown body\n *\n * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored\n * for the non-streaming text response.\n */\nasync function aggregateCodexStream(response: Response): Promise<string> {\n  if (!response.body) {\n    throw new Error('Codex streaming response had no body');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder('utf-8');\n  let buffer = '';\n\n  let finalResponse: any = null;\n  let createdResponse: any = null;\n  // Track output_items by index so we can rebuild the final array\n  const items = new Map<number, any>();\n  // Accumulate output_text deltas keyed by item_index + content_index\n  const textBuffers = new Map<string, string>();\n\n  const handleEvent = (event: { event?: string; data?: string }) => {\n    if (!event.data || event.data === '[DONE]') return;\n    let payload: any;\n    try {\n      payload = JSON.parse(event.data);\n    } catch {\n      return;\n    }\n    const type: string = payload.type ?? event.event ?? '';\n\n    switch (type) {\n      case 'response.created': {\n        createdResponse = payload.response ?? createdResponse;\n        break;\n      }\n      case 'response.output_item.added': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_item.done': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_text.delta': {\n        const key = `${payload.output_index}:${payload.content_index ?? 0}`;\n        textBuffers.set(key, (textBuffers.get(key) ?? '') + (payload.delta ?? ''));\n        break;\n      }\n      case 'response.completed': {\n        finalResponse = payload.response ?? finalResponse;\n        break;\n      }\n      case 'response.error':\n      case 'error': {\n        throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);\n      }\n      default:\n        // Ignore reasoning / unknown events\n        break;\n    }\n  };\n\n  // SSE parser: events separated by blank line; lines like \"event: x\" / \"data: y\"\n  // Normalize CRLF→LF so \\r\\n\\r\\n event boundaries parse correctly (SSE spec allows CRLF).\n  const processChunk = (chunk: string) => {\n    buffer += chunk.replace(/\\r\\n/g, '\\n');\n    let sepIdx: number;\n    while ((sepIdx = buffer.indexOf('\\n\\n')) !== -1) {\n      const raw = buffer.slice(0, sepIdx);\n      buffer = buffer.slice(sepIdx + 2);\n      const event: { event?: string; data?: string } = {};\n      const dataLines: string[] = [];\n      for (const line of raw.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event.event = line.slice(6).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice(5).trimStart());\n        }\n      }\n      if (dataLines.length > 0) {\n        event.data = dataLines.join('\\n');\n      }\n      handleEvent(event);\n    }\n  };\n\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      processChunk(decoder.decode(value, { stream: true }));\n    }\n    processChunk(decoder.decode());\n  } finally {\n    reader.releaseLock();\n  }\n\n  // Stitch accumulated text deltas back into their items\n  const base = finalResponse ?? createdResponse ?? { output: [] };\n  const finalItems = Array.from(items.entries())\n    .sort(([a], [b]) => a - b)\n    .map(([index, item]) => {\n      // Patch message-type items' content text using buffered deltas\n      if (item?.type === 'message' && Array.isArray(item.content)) {\n        item.content = item.content.map((c: any, ci: number) => {\n          const key = `${index}:${ci}`;\n          if (textBuffers.has(key)) {\n            return { ...c, text: textBuffers.get(key) };\n          }\n          return c;\n        });\n      }\n      return item;\n    });\n\n  base.output = finalItems.length > 0 ? finalItems : (base.output ?? []);\n\n  return JSON.stringify(base);\n}\n\n/**\n * Creates an OpenAI model using ChatGPT OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n *\n * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.\n * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.\n */\nexport function openaiCodexProvider(\n  modelId: string = 'codex-mini-latest',\n  options?: { thinkingLevel?: ThinkingLevel; headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const requestedLevel: ThinkingLevel = options?.thinkingLevel ?? 'medium';\n  const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);\n  const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n  const middleware = createCodexMiddleware(reasoningEffort);\n  const headers = options?.headers;\n\n  const baseURL = process.env.OPENAI_BASE_URL;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const openai = createOpenAI({\n      apiKey: 'test-api-key',\n      baseURL,\n      headers,\n    });\n    return wrapLanguageModel({\n      model: openai.responses(modelId),\n      middleware: [middleware],\n    });\n  }\n\n  const openai = createOpenAI({\n    apiKey: 'oauth-dummy-key',\n    baseURL,\n    headers,\n    fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Use the responses API for Codex models\n  // Wrap with middleware\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [middleware],\n  });\n}\n"],"mappings":"AAUA,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAElC,SAAS,mBAAmB;AAI5B,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAGzB,IAAI,sBAA0C;AAKvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAKO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAGA,MAAM,qBAAqB;AAAA;AAAA;AAO3B,MAAM,gBAAgB;AAEf,SAAS,0BAA0B,SAAiB,OAAqC;AAE9F,MAAI,cAAc,KAAK,OAAO,KAAK,UAAU,OAAO;AAClD,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAIO,MAAM,qCAAgF;AAAA,EAC3F,KAAK;AAAA,EACL,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,OAAO;AACT;AAKO,SAAS,sBAAsB,iBAAmD;AACvF,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AAErC,UAAI,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,MAAM;AACnE,eAAO,OAAO;AAAA,MAChB;AAIA,aAAO,kBAAkB;AAAA,QACvB,GAAG,OAAO;AAAA,QACV,QAAQ;AAAA,UACN,GAAI,OAAO,iBAAiB,UAAU,CAAC;AAAA,UACvC,cAAc;AAAA;AAAA,UAEd,OAAO;AAAA;AAAA;AAAA;AAAA,UAIP,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,QAC/C;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAaA,eAAe,eACb,aACiE;AACjE,QAAM,UAAU,eAAe,eAAe;AAC9C,UAAQ,OAAO;AAEf,QAAM,OAAO,QAAQ,IAAI,cAAc;AACvC,MAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,MAAI,cAAc,KAAK;AACvB,MAAI,KAAK,IAAI,KAAK,KAAK,SAAS;AAC9B,UAAM,iBAAiB,MAAM,QAAQ,UAAU,cAAc;AAC7D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,kBAAc;AACd,YAAQ,OAAO;AAAA,EACjB;AAEA,SAAO,EAAE,aAAa,WAAY,KAAa,UAAgC;AACjF;AASO,SAAS,2BACd,OAAgE,CAAC,GACnD;AACd,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,EAAE,aAAa,UAAU,IAAI,MAAM,eAAe,KAAK,WAAW;AAGxE,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,UAAI,KAAK,mBAAmB,SAAS;AACnC,aAAK,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACnC,cAAI,IAAI,YAAY,MAAM,iBAAiB;AACzC,oBAAQ,IAAI,KAAK,KAAK;AAAA,UACxB;AAAA,QACF,CAAC;AAAA,MACH,WAAW,MAAM,QAAQ,KAAK,OAAO,GAAG;AACtC,mBAAW,CAAC,KAAK,KAAK,KAAK,KAAK,SAAS;AACvC,cAAI,IAAK,YAAY,MAAM,mBAAmB,UAAU,QAAW;AACjE,oBAAQ,IAAI,KAAM,OAAO,KAAK,CAAC;AAAA,UACjC;AAAA,QACF;AAAA,MACF,OAAO;AACL,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,OAAO,GAAG;AACvD,cAAI,IAAI,YAAY,MAAM,mBAAmB,UAAU,QAAW;AAChE,oBAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,QAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;AAC9B,cAAQ,IAAI,cAAc,gBAAgB;AAAA,IAC5C;AACA,QAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;AAC9B,cAAQ,IAAI,cAAc,gBAAgB;AAAA,IAC5C;AACA,QAAI,WAAW;AACb,cAAQ,IAAI,sBAAsB,SAAS;AAAA,IAC7C;AAGA,UAAM,SAAS,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;AACtG,UAAM,gBACJ,KAAK,eAAe,UACnB,OAAO,SAAS,SAAS,eAAe,KAAK,OAAO,SAAS,SAAS,mBAAmB;AAC5F,UAAM,WAAW,gBAAgB,IAAI,IAAI,kBAAkB,IAAI;AAE/D,QAAI;AACF,aAAO,MAAM,MAAM,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,SAAS,SAAS;AAAA,QAChC,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAoBO,SAAS,yBAAyB,aAAwC;AAC/E,UAAQ,OAAO,KAA6B,SAAuC;AAEjF,UAAM,EAAE,YAAY,IAAI,MAAM,eAAe,WAAW;AACxD,UAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AACzC,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,YAAQ,IAAI,UAAU,mBAAmB;AAIzC,QAAI,OAA8B,MAAM;AACxC,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,KAAK,IAAI;AACnC,eAAO,SAAS;AAChB,eAAO,KAAK,UAAU,MAAM;AAC5B,YAAI,CAAC,QAAQ,IAAI,cAAc,EAAG,SAAQ,IAAI,gBAAgB,kBAAkB;AAAA,MAClF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,SAAS,KAAK,CAAC;AAC5D,QAAI,CAAC,SAAS,GAAI,QAAO;AAGzB,UAAM,aAAa,MAAM,qBAAqB,QAAQ;AACtD,WAAO,IAAI,SAAS,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAgBA,eAAe,qBAAqB,UAAqC;AACvE,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,MAAI,SAAS;AAEb,MAAI,gBAAqB;AACzB,MAAI,kBAAuB;AAE3B,QAAM,QAAQ,oBAAI,IAAiB;AAEnC,QAAM,cAAc,oBAAI,IAAoB;AAE5C,QAAM,cAAc,CAAC,UAA6C;AAChE,QAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,SAAU;AAC5C,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,MAAM,IAAI;AAAA,IACjC,QAAQ;AACN;AAAA,IACF;AACA,UAAM,OAAe,QAAQ,QAAQ,MAAM,SAAS;AAEpD,YAAQ,MAAM;AAAA,MACZ,KAAK,oBAAoB;AACvB,0BAAkB,QAAQ,YAAY;AACtC;AAAA,MACF;AAAA,MACA,KAAK,8BAA8B;AACjC,YAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MAAM;AAC5D,gBAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,6BAA6B;AAChC,YAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MAAM;AAC5D,gBAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,8BAA8B;AACjC,cAAM,MAAM,GAAG,QAAQ,YAAY,IAAI,QAAQ,iBAAiB,CAAC;AACjE,oBAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;AACzE;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,wBAAgB,QAAQ,YAAY;AACpC;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,SAAS;AACZ,cAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,QAAQ,SAAS,OAAO,CAAC,EAAE;AAAA,MACnF;AAAA,MACA;AAEE;AAAA,IACJ;AAAA,EACF;AAIA,QAAM,eAAe,CAAC,UAAkB;AACtC,cAAU,MAAM,QAAQ,SAAS,IAAI;AACrC,QAAI;AACJ,YAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,IAAI;AAC/C,YAAM,MAAM,OAAO,MAAM,GAAG,MAAM;AAClC,eAAS,OAAO,MAAM,SAAS,CAAC;AAChC,YAAM,QAA2C,CAAC;AAClD,YAAM,YAAsB,CAAC;AAC7B,iBAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,YAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,gBAAM,QAAQ,KAAK,MAAM,CAAC,EAAE,KAAK;AAAA,QACnC,WAAW,KAAK,WAAW,OAAO,GAAG;AACnC,oBAAU,KAAK,KAAK,MAAM,CAAC,EAAE,UAAU,CAAC;AAAA,QAC1C;AAAA,MACF;AACA,UAAI,UAAU,SAAS,GAAG;AACxB,cAAM,OAAO,UAAU,KAAK,IAAI;AAAA,MAClC;AACA,kBAAY,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,mBAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,IACtD;AACA,iBAAa,QAAQ,OAAO,CAAC;AAAA,EAC/B,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAGA,QAAM,OAAO,iBAAiB,mBAAmB,EAAE,QAAQ,CAAC,EAAE;AAC9D,QAAM,aAAa,MAAM,KAAK,MAAM,QAAQ,CAAC,EAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EACxB,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM;AAEtB,QAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,KAAK,OAAO,GAAG;AAC3D,WAAK,UAAU,KAAK,QAAQ,IAAI,CAAC,GAAQ,OAAe;AACtD,cAAM,MAAM,GAAG,KAAK,IAAI,EAAE;AAC1B,YAAI,YAAY,IAAI,GAAG,GAAG;AACxB,iBAAO,EAAE,GAAG,GAAG,MAAM,YAAY,IAAI,GAAG,EAAE;AAAA,QAC5C;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT,CAAC;AAEH,OAAK,SAAS,WAAW,SAAS,IAAI,aAAc,KAAK,UAAU,CAAC;AAEpE,SAAO,KAAK,UAAU,IAAI;AAC5B;AASO,SAAS,oBACd,UAAkB,qBAClB,SACmB;AACnB,QAAM,iBAAgC,SAAS,iBAAiB;AAChE,QAAM,iBAAiB,0BAA0B,SAAS,cAAc;AACxE,QAAM,kBAAkB,mCAAmC,cAAc;AACzE,QAAM,aAAa,sBAAsB,eAAe;AACxD,QAAM,UAAU,SAAS;AAEzB,QAAM,UAAU,QAAQ,IAAI;AAG5B,MAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;AACzD,UAAMA,UAAS,aAAa;AAAA,MAC1B,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,kBAAkB;AAAA,MACvB,OAAOA,QAAO,UAAU,OAAO;AAAA,MAC/B,YAAY,CAAC,UAAU;AAAA,IACzB,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,aAAa;AAAA,IAC1B,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO,2BAA2B,EAAE,aAAa,SAAS,YAAY,CAAC;AAAA,EACzE,CAAC;AAID,SAAO,kBAAkB;AAAA,IACvB,OAAO,OAAO,UAAU,OAAO;AAAA,IAC/B,YAAY,CAAC,UAAU;AAAA,EACzB,CAAC;AACH;","names":["openai"]}
+{"version":3,"file":"openai-codex.js","names":[],"sources":["../../src/providers/openai-codex.ts"],"sourcesContent":["/**\n * OpenAI Codex OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.\n * This allows access to OpenAI models through the ChatGPT OAuth flow.\n *\n * Inspired by opencode's Codex plugin implementation:\n * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts\n */\n\nimport { createOpenAI } from '@ai-sdk/openai';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\n// Codex API endpoint (not standard OpenAI API)\nconst CODEX_API_ENDPOINT = 'https://chatgpt.com/backend-api/codex/responses';\nconst CODEX_ORIGINATOR = 'mastracode';\nconst CODEX_USER_AGENT = 'mastracode';\n\n// Singleton auth storage instance (shared with claude-max.ts)\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n// Default instructions for Codex API (required)\nconst CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nIMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;\n\n/** Valid thinking level values. */\nexport type ThinkingLevel = 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n\nconst GPT5_MODEL_RE = /^gpt-5(?:\\.|-|$)/;\n\nexport function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  // GPT-5.* models on Codex require at least low reasoning.\n  if (GPT5_MODEL_RE.test(modelId) && level === 'off') {\n    return 'low';\n  }\n\n  return level;\n}\n\n// Map thinkingLevel state values to OpenAI reasoningEffort values.\n// undefined means omit the parameter (no reasoning).\nexport const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined> = {\n  off: undefined,\n  low: 'low',\n  medium: 'medium',\n  high: 'high',\n  xhigh: 'xhigh',\n};\n\n/**\n * Create Codex middleware with the given reasoning effort level.\n */\nexport function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      // Remove topP if temperature is set (OpenAI doesn't like both)\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      // Codex API requires specific settings via providerOptions\n      // Use type assertion to satisfy JSONValue constraints\n      params.providerOptions = {\n        ...params.providerOptions,\n        openai: {\n          ...(params.providerOptions?.openai ?? {}),\n          instructions: CODEX_INSTRUCTIONS,\n          // Codex API requires store to be false\n          store: false,\n          // Enable reasoning for Codex models — without this, the model\n          // skips the reasoning/action phase and goes straight to final_answer,\n          // resulting in narration instead of tool calls.\n          ...(reasoningEffort ? { reasoningEffort } : {}),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Get a live OAuth bearer token for the Codex OAuth credential.\n *\n * Refreshes the token if it's expired, and returns the credential's\n * accountId alongside the access token. Throws if the user isn't logged in\n * or if the refresh fails.\n *\n * This is the only piece of Codex auth that is genuinely shared between\n * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand\n * fetch (`buildCodexStagehandFetch`).\n */\nasync function getCodexBearer(\n  authStorage?: CredentialStore,\n): Promise<{ accessToken: string; accountId: string | undefined }> {\n  const storage = authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get('openai-codex');\n  if (!cred || cred.type !== 'oauth') {\n    throw new Error('Not logged in to OpenAI Codex. Run /login first.');\n  }\n\n  let accessToken = cred.access;\n  if (Date.now() >= cred.expires) {\n    const refreshedToken = await storage.getApiKey('openai-codex');\n    if (!refreshedToken) {\n      throw new Error('Failed to refresh OpenAI Codex token. Please /login again.');\n    }\n    accessToken = refreshedToken;\n    storage.reload();\n  }\n\n  return { accessToken, accountId: (cred as any).accountId as string | undefined };\n}\n\n/**\n * Build a fetch function that handles OpenAI Codex OAuth.\n * Preserves non-authorization headers from init.\n * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions\n * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the\n * SDK already targets the correct URL.\n */\nexport function buildOpenAICodexOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { accessToken, accountId } = await getCodexBearer(opts.authStorage);\n\n    // Preserve non-authorization headers\n    const headers = new Headers();\n    if (init?.headers) {\n      if (init.headers instanceof Headers) {\n        init.headers.forEach((value, key) => {\n          if (key.toLowerCase() !== 'authorization') {\n            headers.set(key, value);\n          }\n        });\n      } else if (Array.isArray(init.headers)) {\n        for (const [key, value] of init.headers) {\n          if (key!.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key!, String(value));\n          }\n        }\n      } else {\n        for (const [key, value] of Object.entries(init.headers)) {\n          if (key.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key, String(value));\n          }\n        }\n      }\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    if (!headers.has('originator')) {\n      headers.set('originator', CODEX_ORIGINATOR);\n    }\n    if (!headers.has('User-Agent')) {\n      headers.set('User-Agent', CODEX_USER_AGENT);\n    }\n    if (accountId) {\n      headers.set('ChatGPT-Account-ID', accountId);\n    }\n\n    // URL rewriting — only when rewriteUrl !== false\n    const parsed = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n    const shouldRewrite =\n      opts.rewriteUrl !== false &&\n      (parsed.pathname.includes('/v1/responses') || parsed.pathname.includes('/chat/completions'));\n    const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Build a fetch function for Stagehand-on-Codex.\n *\n * The Codex backend has two requirements that AI SDK's non-streaming\n * `generateText` path doesn't naturally satisfy:\n *\n *   1. `stream: true` must be set on every request body.\n *   2. The response is delivered as Server-Sent Events; AI SDK's\n *      non-streaming code path expects a single JSON body.\n *\n * This fetch forces streaming on the outgoing request, collects the SSE\n * events, and synthesizes the non-streaming JSON shape that\n * `@ai-sdk/openai`'s Responses API parser expects.\n *\n * Headers, OAuth refresh, and URL targeting are handled by the caller via\n * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the\n * live OAuth bearer per call.\n */\nexport function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    // Refresh + inject the OAuth bearer per call\n    const { accessToken } = await getCodexBearer(authStorage);\n    const headers = new Headers(init?.headers);\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('Accept', 'text/event-stream');\n\n    // Force stream: true on the request body\n    type FetchBody = NonNullable<Parameters<typeof fetch>[1]>['body'];\n    let body: FetchBody | undefined = init?.body;\n    if (typeof init?.body === 'string') {\n      try {\n        const parsed = JSON.parse(init.body) as Record<string, unknown>;\n        parsed.stream = true;\n        body = JSON.stringify(parsed);\n        if (!headers.has('content-type')) headers.set('content-type', 'application/json');\n      } catch {\n        // Not JSON; leave as-is\n      }\n    }\n\n    const upstream = await fetch(url, { ...init, headers, body });\n    if (!upstream.ok) return upstream;\n\n    // Aggregate SSE -> synthesized non-streaming Response\n    const aggregated = await aggregateCodexStream(upstream);\n    return new Response(aggregated, {\n      status: 200,\n      headers: { 'content-type': 'application/json' },\n    });\n  }) as typeof fetch;\n}\n\n/**\n * Read an SSE Response and reduce it to a single JSON string matching the\n * non-streaming OpenAI Responses-API shape.\n *\n * Event vocabulary we care about (per OpenAI Responses API streaming):\n *   - response.created         → carries `response` object (id, model, usage stub)\n *   - response.output_item.added/done → output items (message, reasoning, etc.)\n *   - response.output_text.delta → text chunks\n *   - response.completed       → final `response` snapshot incl. usage\n *   - response.error / error   → bubble up as a thrown body\n *\n * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored\n * for the non-streaming text response.\n */\nasync function aggregateCodexStream(response: Response): Promise<string> {\n  if (!response.body) {\n    throw new Error('Codex streaming response had no body');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder('utf-8');\n  let buffer = '';\n\n  let finalResponse: any = null;\n  let createdResponse: any = null;\n  // Track output_items by index so we can rebuild the final array\n  const items = new Map<number, any>();\n  // Accumulate output_text deltas keyed by item_index + content_index\n  const textBuffers = new Map<string, string>();\n\n  const handleEvent = (event: { event?: string; data?: string }) => {\n    if (!event.data || event.data === '[DONE]') return;\n    let payload: any;\n    try {\n      payload = JSON.parse(event.data);\n    } catch {\n      return;\n    }\n    const type: string = payload.type ?? event.event ?? '';\n\n    switch (type) {\n      case 'response.created': {\n        createdResponse = payload.response ?? createdResponse;\n        break;\n      }\n      case 'response.output_item.added': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_item.done': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_text.delta': {\n        const key = `${payload.output_index}:${payload.content_index ?? 0}`;\n        textBuffers.set(key, (textBuffers.get(key) ?? '') + (payload.delta ?? ''));\n        break;\n      }\n      case 'response.completed': {\n        finalResponse = payload.response ?? finalResponse;\n        break;\n      }\n      case 'response.error':\n      case 'error': {\n        throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);\n      }\n      default:\n        // Ignore reasoning / unknown events\n        break;\n    }\n  };\n\n  // SSE parser: events separated by blank line; lines like \"event: x\" / \"data: y\"\n  // Normalize CRLF→LF so \\r\\n\\r\\n event boundaries parse correctly (SSE spec allows CRLF).\n  const processChunk = (chunk: string) => {\n    buffer += chunk.replace(/\\r\\n/g, '\\n');\n    let sepIdx: number;\n    while ((sepIdx = buffer.indexOf('\\n\\n')) !== -1) {\n      const raw = buffer.slice(0, sepIdx);\n      buffer = buffer.slice(sepIdx + 2);\n      const event: { event?: string; data?: string } = {};\n      const dataLines: string[] = [];\n      for (const line of raw.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event.event = line.slice(6).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice(5).trimStart());\n        }\n      }\n      if (dataLines.length > 0) {\n        event.data = dataLines.join('\\n');\n      }\n      handleEvent(event);\n    }\n  };\n\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      processChunk(decoder.decode(value, { stream: true }));\n    }\n    processChunk(decoder.decode());\n  } finally {\n    reader.releaseLock();\n  }\n\n  // Stitch accumulated text deltas back into their items\n  const base = finalResponse ?? createdResponse ?? { output: [] };\n  const finalItems = Array.from(items.entries())\n    .sort(([a], [b]) => a - b)\n    .map(([index, item]) => {\n      // Patch message-type items' content text using buffered deltas\n      if (item?.type === 'message' && Array.isArray(item.content)) {\n        item.content = item.content.map((c: any, ci: number) => {\n          const key = `${index}:${ci}`;\n          if (textBuffers.has(key)) {\n            return { ...c, text: textBuffers.get(key) };\n          }\n          return c;\n        });\n      }\n      return item;\n    });\n\n  base.output = finalItems.length > 0 ? finalItems : (base.output ?? []);\n\n  return JSON.stringify(base);\n}\n\n/**\n * Creates an OpenAI model using ChatGPT OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n *\n * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.\n * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.\n */\nexport function openaiCodexProvider(\n  modelId: string = 'codex-mini-latest',\n  options?: { thinkingLevel?: ThinkingLevel; headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const requestedLevel: ThinkingLevel = options?.thinkingLevel ?? 'medium';\n  const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);\n  const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n  const middleware = createCodexMiddleware(reasoningEffort);\n  const headers = options?.headers;\n\n  const baseURL = process.env.OPENAI_BASE_URL;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const openai = createOpenAI({\n      apiKey: 'test-api-key',\n      baseURL,\n      headers,\n    });\n    return wrapLanguageModel({\n      model: openai.responses(modelId),\n      middleware: [middleware],\n    });\n  }\n\n  const openai = createOpenAI({\n    apiKey: 'oauth-dummy-key',\n    baseURL,\n    headers,\n    fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Use the responses API for Codex models\n  // Wrap with middleware\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [middleware],\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAGzB,IAAI,sBAA0C;;;;AAK9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;AAGA,MAAM,qBAAqB;;;AAO3B,MAAM,gBAAgB;AAEtB,SAAgB,0BAA0B,SAAiB,OAAqC;CAE9F,IAAI,cAAc,KAAK,OAAO,KAAK,UAAU,OAC3C,OAAO;CAGT,OAAO;AACT;AAIA,MAAa,qCAAgF;CAC3F,KAAK,KAAA;CACL,KAAK;CACL,QAAQ;CACR,MAAM;CACN,OAAO;AACT;;;;AAKA,SAAgB,sBAAsB,iBAAmD;CACvF,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GAErC,IAAI,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,MAC7D,OAAO,OAAO;GAKhB,OAAO,kBAAkB;IACvB,GAAG,OAAO;IACV,QAAQ;KACN,GAAI,OAAO,iBAAiB,UAAU,CAAC;KACvC,cAAc;KAEd,OAAO;KAIP,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;IAC/C;GACF;GAEA,OAAO;EACT;CACF;AACF;;;;;;;;;;;;AAaA,eAAe,eACb,aACiE;CACjE,MAAM,UAAU,eAAe,eAAe;CAC9C,QAAQ,OAAO;CAEf,MAAM,OAAO,QAAQ,IAAI,cAAc;CACvC,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,MAAM,kDAAkD;CAGpE,IAAI,cAAc,KAAK;CACvB,IAAI,KAAK,IAAI,KAAK,KAAK,SAAS;EAC9B,MAAM,iBAAiB,MAAM,QAAQ,UAAU,cAAc;EAC7D,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,4DAA4D;EAE9E,cAAc;EACd,QAAQ,OAAO;CACjB;CAEA,OAAO;EAAE;EAAa,WAAY,KAAa;CAAgC;AACjF;;;;;;;;AASA,SAAgB,2BACd,OAAgE,CAAC,GACnD;CACd,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,EAAE,aAAa,cAAc,MAAM,eAAe,KAAK,WAAW;EAGxE,MAAM,UAAU,IAAI,QAAQ;EAC5B,IAAI,MAAM,SACJ;OAAA,KAAK,mBAAmB,SAC1B,KAAK,QAAQ,SAAS,OAAO,QAAQ;IACnC,IAAI,IAAI,YAAY,MAAM,iBACxB,QAAQ,IAAI,KAAK,KAAK;GAE1B,CAAC;QACI,IAAI,MAAM,QAAQ,KAAK,OAAO,GAC9B;SAAA,MAAM,CAAC,KAAK,UAAU,KAAK,SAC9B,IAAI,IAAK,YAAY,MAAM,mBAAmB,UAAU,KAAA,GACtD,QAAQ,IAAI,KAAM,OAAO,KAAK,CAAC;GAAA,OAInC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,OAAO,GACpD,IAAI,IAAI,YAAY,MAAM,mBAAmB,UAAU,KAAA,GACrD,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;EAAA;EAMtC,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,gBAAgB;EAE5C,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,gBAAgB;EAE5C,IAAI,WACF,QAAQ,IAAI,sBAAsB,SAAS;EAI7C,MAAM,SAAS,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;EAItG,MAAM,WAFJ,KAAK,eAAe,UACnB,OAAO,SAAS,SAAS,eAAe,KAAK,OAAO,SAAS,SAAS,mBAAmB,KAC3D,IAAI,IAAI,kBAAkB,IAAI;EAE/D,IAAI;GACF,OAAO,MAAM,MAAM,UAAU;IAAE,GAAG;IAAM;GAAQ,CAAC;EACnD,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,SAAS,SAAS,EAChC,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,yBAAyB,aAAwC;CAC/E,QAAQ,OAAO,KAA6B,SAAuC;EAEjF,MAAM,EAAE,gBAAgB,MAAM,eAAe,WAAW;EACxD,MAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;EACzC,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,QAAQ,IAAI,UAAU,mBAAmB;EAIzC,IAAI,OAA8B,MAAM;EACxC,IAAI,OAAO,MAAM,SAAS,UACxB,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,KAAK,IAAI;GACnC,OAAO,SAAS;GAChB,OAAO,KAAK,UAAU,MAAM;GAC5B,IAAI,CAAC,QAAQ,IAAI,cAAc,GAAG,QAAQ,IAAI,gBAAgB,kBAAkB;EAClF,QAAQ,CAER;EAGF,MAAM,WAAW,MAAM,MAAM,KAAK;GAAE,GAAG;GAAM;GAAS;EAAK,CAAC;EAC5D,IAAI,CAAC,SAAS,IAAI,OAAO;EAGzB,MAAM,aAAa,MAAM,qBAAqB,QAAQ;EACtD,OAAO,IAAI,SAAS,YAAY;GAC9B,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;EAChD,CAAC;CACH;AACF;;;;;;;;;;;;;;;AAgBA,eAAe,qBAAqB,UAAqC;CACvE,IAAI,CAAC,SAAS,MACZ,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,UAAU,IAAI,YAAY,OAAO;CACvC,IAAI,SAAS;CAEb,IAAI,gBAAqB;CACzB,IAAI,kBAAuB;CAE3B,MAAM,wBAAQ,IAAI,IAAiB;CAEnC,MAAM,8BAAc,IAAI,IAAoB;CAE5C,MAAM,eAAe,UAA6C;EAChE,IAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,UAAU;EAC5C,IAAI;EACJ,IAAI;GACF,UAAU,KAAK,MAAM,MAAM,IAAI;EACjC,QAAQ;GACN;EACF;EAGA,QAFqB,QAAQ,QAAQ,MAAM,SAAS,IAEpD;GACE,KAAK;IACH,kBAAkB,QAAQ,YAAY;IACtC;GAEF,KAAK;IACH,IAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MACtD,MAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;IAE9C;GAEF,KAAK;IACH,IAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MACtD,MAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;IAE9C;GAEF,KAAK,8BAA8B;IACjC,MAAM,MAAM,GAAG,QAAQ,aAAa,GAAG,QAAQ,iBAAiB;IAChE,YAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;IACzE;GACF;GACA,KAAK;IACH,gBAAgB,QAAQ,YAAY;IACpC;GAEF,KAAK;GACL,KAAK,SACH,MAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,QAAQ,SAAS,OAAO,GAAG;GAEnF,SAEE;EACJ;CACF;CAIA,MAAM,gBAAgB,UAAkB;EACtC,UAAU,MAAM,QAAQ,SAAS,IAAI;EACrC,IAAI;EACJ,QAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,IAAI;GAC/C,MAAM,MAAM,OAAO,MAAM,GAAG,MAAM;GAClC,SAAS,OAAO,MAAM,SAAS,CAAC;GAChC,MAAM,QAA2C,CAAC;GAClD,MAAM,YAAsB,CAAC;GAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,GAC/B,IAAI,KAAK,WAAW,QAAQ,GAC1B,MAAM,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;QAC5B,IAAI,KAAK,WAAW,OAAO,GAChC,UAAU,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;GAG5C,IAAI,UAAU,SAAS,GACrB,MAAM,OAAO,UAAU,KAAK,IAAI;GAElC,YAAY,KAAK;EACnB;CACF;CAEA,IAAI;EACF,OAAO,MAAM;GACX,MAAM,EAAE,OAAO,SAAS,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,aAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;EACtD;EACA,aAAa,QAAQ,OAAO,CAAC;CAC/B,UAAU;EACR,OAAO,YAAY;CACrB;CAGA,MAAM,OAAO,iBAAiB,mBAAmB,EAAE,QAAQ,CAAC,EAAE;CAC9D,MAAM,aAAa,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CACzB,KAAK,CAAC,OAAO,UAAU;EAEtB,IAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,KAAK,OAAO,GACxD,KAAK,UAAU,KAAK,QAAQ,KAAK,GAAQ,OAAe;GACtD,MAAM,MAAM,GAAG,MAAM,GAAG;GACxB,IAAI,YAAY,IAAI,GAAG,GACrB,OAAO;IAAE,GAAG;IAAG,MAAM,YAAY,IAAI,GAAG;GAAE;GAE5C,OAAO;EACT,CAAC;EAEH,OAAO;CACT,CAAC;CAEH,KAAK,SAAS,WAAW,SAAS,IAAI,aAAc,KAAK,UAAU,CAAC;CAEpE,OAAO,KAAK,UAAU,IAAI;AAC5B;;;;;;;;AASA,SAAgB,oBACd,UAAkB,qBAClB,SACmB;CAEnB,MAAM,iBAAiB,0BAA0B,SADX,SAAS,iBAAiB,QACQ;CACxE,MAAM,kBAAkB,mCAAmC;CAC3D,MAAM,aAAa,sBAAsB,eAAe;CACxD,MAAM,UAAU,SAAS;CAEzB,MAAM,UAAU,QAAQ,IAAI;CAG5B,IAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAMjD,OAAO,kBAAkB;EACvB,OANa,aAAa;GAC1B,QAAQ;GACR;GACA;EACF,CAEc,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC,UAAU;CACzB,CAAC;CAYH,OAAO,kBAAkB;EACvB,OAVa,aAAa;GAC1B,QAAQ;GACR;GACA;GACA,OAAO,2BAA2B,EAAE,aAAa,SAAS,YAAY,CAAC;EACzE,CAKc,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC,UAAU;CACzB,CAAC;AACH"}

package/dist/providers/xai.js

@@ -1,63 +1,70 @@
-import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
 import { AuthStorage } from "../auth/storage.js";
+import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
+//#region src/providers/xai.ts
+/**
+* xAI (Grok) OAuth Provider
+*
+* Uses OAuth tokens from AuthStorage to authenticate with the xAI API.
+* The xAI API speaks an OpenAI-compatible chat format, and the OAuth access
+* token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`
+* into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)
+* access token.
+*/
 const XAI_PROVIDER_ID = "xai";
 const XAI_BASE_URL = "https://api.x.ai/v1";
 let authStorageInstance = null;
+/** Get or create the shared AuthStorage instance. */
 function getAuthStorage() {
-  if (!authStorageInstance) {
-    authStorageInstance = new AuthStorage();
-  }
-  return authStorageInstance;
+	if (!authStorageInstance) authStorageInstance = new AuthStorage();
+	return authStorageInstance;
 }
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
 function setAuthStorage(storage) {
-  authStorageInstance = storage ?? null;
+	authStorageInstance = storage ?? null;
 }
+/**
+* Build a fetch wrapper that authenticates with xAI OAuth.
+* Injects the access token (auto-refreshed by AuthStorage) as a bearer token,
+* preserving non-auth headers from the caller.
+*/
 function buildXAIOAuthFetch(opts = {}) {
-  return (async (url, init) => {
-    const storage = opts.authStorage ?? getAuthStorage();
-    storage.reload();
-    const cred = storage.get(XAI_PROVIDER_ID);
-    if (!cred || cred.type !== "oauth") {
-      throw new Error("Not logged in to xAI. Run /login first.");
-    }
-    const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);
-    if (!accessToken) {
-      throw new Error("Failed to refresh xAI token. Please /login again.");
-    }
-    const headers = new Headers(url instanceof Request ? url.headers : void 0);
-    if (init?.headers) {
-      new Headers(init.headers).forEach((value, key) => headers.set(key, value));
-    }
-    headers.delete("authorization");
-    headers.delete("x-api-key");
-    headers.set("Authorization", `Bearer ${accessToken}`);
-    try {
-      return await fetch(url, { ...init, headers });
-    } catch (error) {
-      if (error && typeof error === "object") {
-        Object.assign(error, {
-          requestUrl: url instanceof URL ? url.toString() : typeof url === "string" ? url : url.url
-        });
-      }
-      throw error;
-    }
-  });
+	return (async (url, init) => {
+		const storage = opts.authStorage ?? getAuthStorage();
+		storage.reload();
+		const cred = storage.get(XAI_PROVIDER_ID);
+		if (!cred || cred.type !== "oauth") throw new Error("Not logged in to xAI. Run /login first.");
+		const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);
+		if (!accessToken) throw new Error("Failed to refresh xAI token. Please /login again.");
+		const headers = new Headers(url instanceof Request ? url.headers : void 0);
+		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
+		headers.delete("authorization");
+		headers.delete("x-api-key");
+		headers.set("Authorization", `Bearer ${accessToken}`);
+		try {
+			return await fetch(url, {
+				...init,
+				headers
+			});
+		} catch (error) {
+			if (error && typeof error === "object") Object.assign(error, { requestUrl: url instanceof URL ? url.toString() : typeof url === "string" ? url : url.url });
+			throw error;
+		}
+	});
 }
+/**
+* Creates an xAI model using OAuth authentication.
+* Uses OAuth tokens from AuthStorage (auto-refreshes when needed).
+*/
 function xaiProvider(modelId, options) {
-  const provider = createOpenAICompatible({
-    name: XAI_PROVIDER_ID,
-    baseURL: XAI_BASE_URL,
-    apiKey: "oauth-placeholder",
-    // real auth injected by the custom fetch
-    headers: options?.headers,
-    fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage })
-  });
-  return provider.chatModel(modelId);
+	return createOpenAICompatible({
+		name: XAI_PROVIDER_ID,
+		baseURL: XAI_BASE_URL,
+		apiKey: "oauth-placeholder",
+		headers: options?.headers,
+		fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage })
+	}).chatModel(modelId);
 }
-export {
-  buildXAIOAuthFetch,
-  getAuthStorage,
-  setAuthStorage,
-  xaiProvider
-};
+//#endregion
+export { buildXAIOAuthFetch, getAuthStorage, setAuthStorage, xaiProvider };
+
 //# sourceMappingURL=xai.js.map

package/dist/providers/xai.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/xai.ts"],"sourcesContent":["/**\n * xAI (Grok) OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with the xAI API.\n * The xAI API speaks an OpenAI-compatible chat format, and the OAuth access\n * token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`\n * into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)\n * access token.\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\nconst XAI_PROVIDER_ID = 'xai';\nconst XAI_BASE_URL = 'https://api.x.ai/v1';\n\n// Singleton auth storage instance (shared with claude-max.ts / github-copilot.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Build a fetch wrapper that authenticates with xAI OAuth.\n * Injects the access token (auto-refreshed by AuthStorage) as a bearer token,\n * preserving non-auth headers from the caller.\n */\nexport function buildXAIOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(XAI_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new Error('Not logged in to xAI. Run /login first.');\n    }\n\n    // getApiKey() refreshes the access token if it has expired.\n    const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);\n    if (!accessToken) {\n      throw new Error('Failed to refresh xAI token. Please /login again.');\n    }\n\n    // Preserve existing headers, strip auth-related ones. Explicit init\n    // headers override headers carried by an incoming Request.\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (init?.headers) {\n      new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    }\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n\n    try {\n      return await fetch(url, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: url instanceof URL ? url.toString() : typeof url === 'string' ? url : (url as Request).url,\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an xAI model using OAuth authentication.\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed).\n */\nexport function xaiProvider(\n  modelId: string,\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const provider = createOpenAICompatible({\n    name: XAI_PROVIDER_ID,\n    baseURL: XAI_BASE_URL,\n    apiKey: 'oauth-placeholder', // real auth injected by the custom fetch\n    headers: options?.headers,\n    fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage }),\n  });\n  return provider.chatModel(modelId);\n}\n"],"mappings":"AAUA,SAAS,8BAA8B;AAEvC,SAAS,mBAAmB;AAG5B,MAAM,kBAAkB;AACxB,MAAM,eAAe;AAGrB,IAAI,sBAA0C;AAGvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAGO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAOO,SAAS,mBAAmB,OAA0C,CAAC,GAAiB;AAC7F,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,UAAU,KAAK,eAAe,eAAe;AACnD,YAAQ,OAAO;AAEf,UAAM,OAAO,QAAQ,IAAI,eAAe;AACxC,QAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAGA,UAAM,cAAc,MAAM,QAAQ,UAAU,eAAe;AAC3D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAIA,UAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,MAAS;AAC5E,QAAI,MAAM,SAAS;AACjB,UAAI,QAAQ,KAAK,OAAO,EAAE,QAAQ,CAAC,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAAA,IAC3E;AACA,YAAQ,OAAO,eAAe;AAC9B,YAAQ,OAAO,WAAW;AAE1B,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AAEpD,QAAI;AACF,aAAO,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC9C,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB;AAAA,QACrG,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,SAAS,YACd,SACA,SACmB;AACnB,QAAM,WAAW,uBAAuB;AAAA,IACtC,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA;AAAA,IACR,SAAS,SAAS;AAAA,IAClB,OAAO,mBAAmB,EAAE,aAAa,SAAS,YAAY,CAAC;AAAA,EACjE,CAAC;AACD,SAAO,SAAS,UAAU,OAAO;AACnC;","names":[]}
+{"version":3,"file":"xai.js","names":[],"sources":["../../src/providers/xai.ts"],"sourcesContent":["/**\n * xAI (Grok) OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with the xAI API.\n * The xAI API speaks an OpenAI-compatible chat format, and the OAuth access\n * token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`\n * into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)\n * access token.\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\nconst XAI_PROVIDER_ID = 'xai';\nconst XAI_BASE_URL = 'https://api.x.ai/v1';\n\n// Singleton auth storage instance (shared with claude-max.ts / github-copilot.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Build a fetch wrapper that authenticates with xAI OAuth.\n * Injects the access token (auto-refreshed by AuthStorage) as a bearer token,\n * preserving non-auth headers from the caller.\n */\nexport function buildXAIOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(XAI_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new Error('Not logged in to xAI. Run /login first.');\n    }\n\n    // getApiKey() refreshes the access token if it has expired.\n    const accessToken = await storage.getApiKey(XAI_PROVIDER_ID);\n    if (!accessToken) {\n      throw new Error('Failed to refresh xAI token. Please /login again.');\n    }\n\n    // Preserve existing headers, strip auth-related ones. Explicit init\n    // headers override headers carried by an incoming Request.\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (init?.headers) {\n      new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    }\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n\n    try {\n      return await fetch(url, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: url instanceof URL ? url.toString() : typeof url === 'string' ? url : (url as Request).url,\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an xAI model using OAuth authentication.\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed).\n */\nexport function xaiProvider(\n  modelId: string,\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const provider = createOpenAICompatible({\n    name: XAI_PROVIDER_ID,\n    baseURL: XAI_BASE_URL,\n    apiKey: 'oauth-placeholder', // real auth injected by the custom fetch\n    headers: options?.headers,\n    fetch: buildXAIOAuthFetch({ authStorage: options?.authStorage }),\n  });\n  return provider.chatModel(modelId);\n}\n"],"mappings":";;;;;;;;;;;;AAeA,MAAM,kBAAkB;AACxB,MAAM,eAAe;AAGrB,IAAI,sBAA0C;;AAG9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;AAGA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;;AAOA,SAAgB,mBAAmB,OAA0C,CAAC,GAAiB;CAC7F,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAEf,MAAM,OAAO,QAAQ,IAAI,eAAe;EACxC,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,MAAM,yCAAyC;EAI3D,MAAM,cAAc,MAAM,QAAQ,UAAU,eAAe;EAC3D,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,mDAAmD;EAKrE,MAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,KAAA,CAAS;EAC5E,IAAI,MAAM,SACR,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAE3E,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAE1B,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EAEpD,IAAI;GACF,OAAO,MAAM,MAAM,KAAK;IAAE,GAAG;IAAM;GAAQ,CAAC;EAC9C,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,IACrG,CAAC;GAEH,MAAM;EACR;CACF;AACF;;;;;AAMA,SAAgB,YACd,SACA,SACmB;CAQnB,OAPiB,uBAAuB;EACtC,MAAM;EACN,SAAS;EACT,QAAQ;EACR,SAAS,SAAS;EAClB,OAAO,mBAAmB,EAAE,aAAa,SAAS,YAAY,CAAC;CACjE,CACc,CAAC,CAAC,UAAU,OAAO;AACnC"}

package/dist/schema.js

@@ -1,93 +1,95 @@
-import { z } from "zod";
 import { DEFAULT_CONFIG_DIR, DEFAULT_OM_MODEL_ID } from "./constants.js";
+import { z } from "zod";
+//#region src/schema.ts
 const stateSchema = z.object({
-  // Session-scoped selection.
-  // validates state against this schema, so they MUST be declared here — Zod
-  // strips unknown keys on parse, which would otherwise silently discard the
-  // seeded model and leave the controller with no model selected.
-  currentModelId: z.string().optional(),
-  modeId: z.string().optional(),
-  subagentModelId: z.string().optional(),
-  projectPath: z.string().optional(),
-  projectName: z.string().optional(),
-  factoryProjectId: z.string().optional(),
-  projectRepositoryId: z.string().optional(),
-  sandboxId: z.string().optional(),
-  sandboxWorkdir: z.string().optional(),
-  worktreePath: z.string().optional(),
-  branch: z.string().optional(),
-  configDir: z.string().default(DEFAULT_CONFIG_DIR),
-  homeDir: z.string().optional(),
-  gitBranch: z.string().optional(),
-  lastCommand: z.string().optional(),
-  // Observational Memory model settings
-  observerModelId: z.string().default(DEFAULT_OM_MODEL_ID),
-  reflectorModelId: z.string().default(DEFAULT_OM_MODEL_ID),
-  // Observational Memory threshold settings
-  observationThreshold: z.number().default(3e4),
-  reflectionThreshold: z.number().default(4e4),
-  // Whether observations and reflections use the terse caveman-style instruction.
-  // Off by default — caveman style is opt-in via `/om` settings; observers and
-  // reflectors fall back to their built-in (prose) behavior unless enabled.
-  cavemanObservations: z.boolean().default(false),
-  // Whether OM forwards image/file attachment parts to the Observer LLM.
-  // 'auto' (default) checks the provider capabilities registry to decide.
-  // true/false forces the setting regardless of model capabilities.
-  observeAttachments: z.union([z.literal("auto"), z.boolean()]).default("auto"),
-  // Observational Memory scope — 'thread' (per-conversation) or 'resource' (shared across threads)
-  omScope: z.enum(["thread", "resource"]).optional(),
-  // Thinking level for model reasoning effort
-  thinkingLevel: z.enum(["off", "low", "medium", "high", "xhigh"]).default("off"),
-  // YOLO mode — auto-approve all tool calls
-  yolo: z.boolean().default(false),
-  // Permission rules — per-category and per-tool approval policies
-  permissionRules: z.object({
-    categories: z.record(z.string(), z.enum(["allow", "ask", "deny"])).default({}),
-    tools: z.record(z.string(), z.enum(["allow", "ask", "deny"])).default({})
-  }).default({ categories: {}, tools: {} }),
-  // Smart editing mode — use AST-based analysis for code edits
-  smartEditing: z.boolean().default(true),
-  // Notification mode — alert when TUI needs user attention
-  notifications: z.enum(["bell", "system", "both", "off"]).default("off"),
-  // Task list (ephemeral per-thread, cleared on thread switch/creation)
-  tasks: z.array(
-    z.object({
-      id: z.string().optional(),
-      content: z.string(),
-      status: z.enum(["pending", "in_progress", "completed"]),
-      activeForm: z.string()
-    })
-  ).default([]),
-  // Sandbox allowed paths (per-thread, absolute paths allowed in addition to project root)
-  sandboxAllowedPaths: z.array(z.string()).default([]),
-  // Asset directories contributed by active plugins.
-  pluginSkillPaths: z.array(z.string()).default([]),
-  pluginCommandPaths: z.array(z.string()).default([]),
-  pluginInstructions: z.array(z.string()).default([]),
-  // Active plan (set when a plan is approved in Plan mode)
-  activePlan: z.object({
-    title: z.string(),
-    plan: z.string(),
-    approvedAt: z.string()
-  }).nullable().default(null),
-  // Active browser settings (tracks what's actually running vs. what's in the settings file)
-  activeBrowserSettings: z.object({
-    enabled: z.boolean(),
-    provider: z.enum(["stagehand", "agent-browser"]),
-    headless: z.boolean().optional(),
-    viewport: z.object({
-      width: z.number(),
-      height: z.number()
-    }).optional(),
-    cdpUrl: z.string().optional(),
-    stagehand: z.object({
-      env: z.enum(["LOCAL", "BROWSERBASE"]),
-      apiKey: z.string().optional(),
-      projectId: z.string().optional()
-    }).optional()
-  }).optional()
+	currentModelId: z.string().optional(),
+	modeId: z.string().optional(),
+	subagentModelId: z.string().optional(),
+	projectPath: z.string().optional(),
+	projectName: z.string().optional(),
+	factoryProjectId: z.string().optional(),
+	projectRepositoryId: z.string().optional(),
+	sandboxId: z.string().optional(),
+	sandboxWorkdir: z.string().optional(),
+	worktreePath: z.string().optional(),
+	branch: z.string().optional(),
+	configDir: z.string().default(DEFAULT_CONFIG_DIR),
+	homeDir: z.string().optional(),
+	gitBranch: z.string().optional(),
+	lastCommand: z.string().optional(),
+	observerModelId: z.string().default(DEFAULT_OM_MODEL_ID),
+	reflectorModelId: z.string().default(DEFAULT_OM_MODEL_ID),
+	observationThreshold: z.number().default(3e4),
+	reflectionThreshold: z.number().default(4e4),
+	cavemanObservations: z.boolean().default(false),
+	observeAttachments: z.union([z.literal("auto"), z.boolean()]).default("auto"),
+	omScope: z.enum(["thread", "resource"]).optional(),
+	thinkingLevel: z.enum([
+		"off",
+		"low",
+		"medium",
+		"high",
+		"xhigh"
+	]).default("off"),
+	yolo: z.boolean().default(false),
+	permissionRules: z.object({
+		categories: z.record(z.string(), z.enum([
+			"allow",
+			"ask",
+			"deny"
+		])).default({}),
+		tools: z.record(z.string(), z.enum([
+			"allow",
+			"ask",
+			"deny"
+		])).default({})
+	}).default({
+		categories: {},
+		tools: {}
+	}),
+	smartEditing: z.boolean().default(true),
+	notifications: z.enum([
+		"bell",
+		"system",
+		"both",
+		"off"
+	]).default("off"),
+	tasks: z.array(z.object({
+		id: z.string().optional(),
+		content: z.string(),
+		status: z.enum([
+			"pending",
+			"in_progress",
+			"completed"
+		]),
+		activeForm: z.string()
+	})).default([]),
+	sandboxAllowedPaths: z.array(z.string()).default([]),
+	pluginSkillPaths: z.array(z.string()).default([]),
+	pluginCommandPaths: z.array(z.string()).default([]),
+	pluginInstructions: z.array(z.string()).default([]),
+	activePlan: z.object({
+		title: z.string(),
+		plan: z.string(),
+		approvedAt: z.string()
+	}).nullable().default(null),
+	activeBrowserSettings: z.object({
+		enabled: z.boolean(),
+		provider: z.enum(["stagehand", "agent-browser"]),
+		headless: z.boolean().optional(),
+		viewport: z.object({
+			width: z.number(),
+			height: z.number()
+		}).optional(),
+		cdpUrl: z.string().optional(),
+		stagehand: z.object({
+			env: z.enum(["LOCAL", "BROWSERBASE"]),
+			apiKey: z.string().optional(),
+			projectId: z.string().optional()
+		}).optional()
+	}).optional()
 });
-export {
-  stateSchema
-};
+//#endregion
+export { stateSchema };
+
 //# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/schema.ts"],"sourcesContent":["import { z } from 'zod';\nimport { DEFAULT_CONFIG_DIR, DEFAULT_OM_MODEL_ID } from './constants.js';\n\nexport type PermissionPolicy = 'allow' | 'ask' | 'deny';\n\nexport type MastraCodeSessionState = {\n  currentModelId: string;\n  modeId: string;\n};\n\nexport type MastraCodeComposedState = MastraCodeState & MastraCodeSessionState;\n\nexport interface MastraCodeState {\n  [key: string]: unknown;\n  [key: `subagentModelId_${string}`]: string | undefined;\n  subagentModelId?: string;\n  projectPath?: string;\n  projectName?: string;\n  /** Factory project that owns this session. */\n  factoryProjectId?: string;\n  /** Linked repository used by this session when source-control execution is required. */\n  projectRepositoryId?: string;\n  /** Persisted sandbox id for reattaching the project's cloud workspace. */\n  sandboxId?: string;\n  /** Path inside the sandbox the repo is cloned into. */\n  sandboxWorkdir?: string;\n  /** Active git worktree path inside the sandbox for the current unit of work. */\n  worktreePath?: string;\n  /** Active feature branch checked out in the worktree. */\n  branch?: string;\n  configDir: string;\n  homeDir?: string;\n  gitBranch?: string;\n  lastCommand?: string;\n  observerModelId: string;\n  reflectorModelId: string;\n  observationThreshold: number;\n  reflectionThreshold: number;\n  cavemanObservations: boolean;\n  observeAttachments: 'auto' | boolean;\n  omScope?: 'thread' | 'resource';\n  thinkingLevel: 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n  yolo: boolean;\n  permissionRules: {\n    categories: Record<string, PermissionPolicy>;\n    tools: Record<string, PermissionPolicy>;\n  };\n  smartEditing: boolean;\n  notifications: 'bell' | 'system' | 'both' | 'off';\n  tasks: Array<{\n    id?: string;\n    content: string;\n    status: 'pending' | 'in_progress' | 'completed';\n    activeForm: string;\n  }>;\n  sandboxAllowedPaths: string[];\n  pluginSkillPaths: string[];\n  pluginCommandPaths: string[];\n  pluginInstructions: string[];\n  activePlan: {\n    title: string;\n    plan: string;\n    approvedAt: string;\n  } | null;\n  activeBrowserSettings?: {\n    enabled: boolean;\n    provider: 'stagehand' | 'agent-browser';\n    headless?: boolean;\n    viewport?: {\n      width: number;\n      height: number;\n    };\n    cdpUrl?: string;\n    stagehand?: {\n      env: 'LOCAL' | 'BROWSERBASE';\n      apiKey?: string;\n      projectId?: string;\n    };\n  };\n}\n\nexport const stateSchema = z.object({\n  // Session-scoped selection.\n  // validates state against this schema, so they MUST be declared here — Zod\n  // strips unknown keys on parse, which would otherwise silently discard the\n  // seeded model and leave the controller with no model selected.\n  currentModelId: z.string().optional(),\n  modeId: z.string().optional(),\n  subagentModelId: z.string().optional(),\n  projectPath: z.string().optional(),\n  projectName: z.string().optional(),\n  factoryProjectId: z.string().optional(),\n  projectRepositoryId: z.string().optional(),\n  sandboxId: z.string().optional(),\n  sandboxWorkdir: z.string().optional(),\n  worktreePath: z.string().optional(),\n  branch: z.string().optional(),\n  configDir: z.string().default(DEFAULT_CONFIG_DIR),\n  homeDir: z.string().optional(),\n  gitBranch: z.string().optional(),\n  lastCommand: z.string().optional(),\n  // Observational Memory model settings\n  observerModelId: z.string().default(DEFAULT_OM_MODEL_ID),\n  reflectorModelId: z.string().default(DEFAULT_OM_MODEL_ID),\n  // Observational Memory threshold settings\n  observationThreshold: z.number().default(30_000),\n  reflectionThreshold: z.number().default(40_000),\n  // Whether observations and reflections use the terse caveman-style instruction.\n  // Off by default — caveman style is opt-in via `/om` settings; observers and\n  // reflectors fall back to their built-in (prose) behavior unless enabled.\n  cavemanObservations: z.boolean().default(false),\n  // Whether OM forwards image/file attachment parts to the Observer LLM.\n  // 'auto' (default) checks the provider capabilities registry to decide.\n  // true/false forces the setting regardless of model capabilities.\n  observeAttachments: z.union([z.literal('auto'), z.boolean()]).default('auto'),\n  // Observational Memory scope — 'thread' (per-conversation) or 'resource' (shared across threads)\n  omScope: z.enum(['thread', 'resource']).optional(),\n  // Thinking level for model reasoning effort\n  thinkingLevel: z.enum(['off', 'low', 'medium', 'high', 'xhigh']).default('off'),\n  // YOLO mode — auto-approve all tool calls\n  yolo: z.boolean().default(false),\n  // Permission rules — per-category and per-tool approval policies\n  permissionRules: z\n    .object({\n      categories: z.record(z.string(), z.enum(['allow', 'ask', 'deny'])).default({}),\n      tools: z.record(z.string(), z.enum(['allow', 'ask', 'deny'])).default({}),\n    })\n    .default({ categories: {}, tools: {} }),\n  // Smart editing mode — use AST-based analysis for code edits\n  smartEditing: z.boolean().default(true),\n  // Notification mode — alert when TUI needs user attention\n  notifications: z.enum(['bell', 'system', 'both', 'off']).default('off'),\n  // Task list (ephemeral per-thread, cleared on thread switch/creation)\n  tasks: z\n    .array(\n      z.object({\n        id: z.string().optional(),\n        content: z.string(),\n        status: z.enum(['pending', 'in_progress', 'completed']),\n        activeForm: z.string(),\n      }),\n    )\n    .default([]),\n  // Sandbox allowed paths (per-thread, absolute paths allowed in addition to project root)\n  sandboxAllowedPaths: z.array(z.string()).default([]),\n  // Asset directories contributed by active plugins.\n  pluginSkillPaths: z.array(z.string()).default([]),\n  pluginCommandPaths: z.array(z.string()).default([]),\n  pluginInstructions: z.array(z.string()).default([]),\n  // Active plan (set when a plan is approved in Plan mode)\n  activePlan: z\n    .object({\n      title: z.string(),\n      plan: z.string(),\n      approvedAt: z.string(),\n    })\n    .nullable()\n    .default(null),\n  // Active browser settings (tracks what's actually running vs. what's in the settings file)\n  activeBrowserSettings: z\n    .object({\n      enabled: z.boolean(),\n      provider: z.enum(['stagehand', 'agent-browser']),\n      headless: z.boolean().optional(),\n      viewport: z\n        .object({\n          width: z.number(),\n          height: z.number(),\n        })\n        .optional(),\n      cdpUrl: z.string().optional(),\n      stagehand: z\n        .object({\n          env: z.enum(['LOCAL', 'BROWSERBASE']),\n          apiKey: z.string().optional(),\n          projectId: z.string().optional(),\n        })\n        .optional(),\n    })\n    .optional(),\n});\n"],"mappings":"AAAA,SAAS,SAAS;AAClB,SAAS,oBAAoB,2BAA2B;AAgFjD,MAAM,cAAc,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,QAAQ,kBAAkB;AAAA,EAChD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA,EACvD,kBAAkB,EAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAExD,sBAAsB,EAAE,OAAO,EAAE,QAAQ,GAAM;AAAA,EAC/C,qBAAqB,EAAE,OAAO,EAAE,QAAQ,GAAM;AAAA;AAAA;AAAA;AAAA,EAI9C,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,EAI9C,oBAAoB,EAAE,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,MAAM;AAAA;AAAA,EAE5E,SAAS,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,SAAS;AAAA;AAAA,EAEjD,eAAe,EAAE,KAAK,CAAC,OAAO,OAAO,UAAU,QAAQ,OAAO,CAAC,EAAE,QAAQ,KAAK;AAAA;AAAA,EAE9E,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAE/B,iBAAiB,EACd,OAAO;AAAA,IACN,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,KAAK,CAAC,SAAS,OAAO,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,KAAK,CAAC,SAAS,OAAO,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC1E,CAAC,EACA,QAAQ,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AAAA;AAAA,EAExC,cAAc,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA;AAAA,EAEtC,eAAe,EAAE,KAAK,CAAC,QAAQ,UAAU,QAAQ,KAAK,CAAC,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEtE,OAAO,EACJ;AAAA,IACC,EAAE,OAAO;AAAA,MACP,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,MACxB,SAAS,EAAE,OAAO;AAAA,MAClB,QAAQ,EAAE,KAAK,CAAC,WAAW,eAAe,WAAW,CAAC;AAAA,MACtD,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,EACH,EACC,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEb,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEnD,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EAChD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EAClD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAElD,YAAY,EACT,OAAO;AAAA,IACN,OAAO,EAAE,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO;AAAA,IACf,YAAY,EAAE,OAAO;AAAA,EACvB,CAAC,EACA,SAAS,EACT,QAAQ,IAAI;AAAA;AAAA,EAEf,uBAAuB,EACpB,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ;AAAA,IACnB,UAAU,EAAE,KAAK,CAAC,aAAa,eAAe,CAAC;AAAA,IAC/C,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC/B,UAAU,EACP,OAAO;AAAA,MACN,OAAO,EAAE,OAAO;AAAA,MAChB,QAAQ,EAAE,OAAO;AAAA,IACnB,CAAC,EACA,SAAS;AAAA,IACZ,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,WAAW,EACR,OAAO;AAAA,MACN,KAAK,EAAE,KAAK,CAAC,SAAS,aAAa,CAAC;AAAA,MACpC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,MAC5B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,CAAC,EACA,SAAS;AAAA,EACd,CAAC,EACA,SAAS;AACd,CAAC;","names":[]}
+{"version":3,"file":"schema.js","names":[],"sources":["../src/schema.ts"],"sourcesContent":["import { z } from 'zod';\nimport { DEFAULT_CONFIG_DIR, DEFAULT_OM_MODEL_ID } from './constants.js';\n\nexport type PermissionPolicy = 'allow' | 'ask' | 'deny';\n\nexport type MastraCodeSessionState = {\n  currentModelId: string;\n  modeId: string;\n};\n\nexport type MastraCodeComposedState = MastraCodeState & MastraCodeSessionState;\n\nexport interface MastraCodeState {\n  [key: string]: unknown;\n  [key: `subagentModelId_${string}`]: string | undefined;\n  subagentModelId?: string;\n  projectPath?: string;\n  projectName?: string;\n  /** Factory project that owns this session. */\n  factoryProjectId?: string;\n  /** Linked repository used by this session when source-control execution is required. */\n  projectRepositoryId?: string;\n  /** Persisted sandbox id for reattaching the project's cloud workspace. */\n  sandboxId?: string;\n  /** Path inside the sandbox the repo is cloned into. */\n  sandboxWorkdir?: string;\n  /** Active git worktree path inside the sandbox for the current unit of work. */\n  worktreePath?: string;\n  /** Active feature branch checked out in the worktree. */\n  branch?: string;\n  configDir: string;\n  homeDir?: string;\n  gitBranch?: string;\n  lastCommand?: string;\n  observerModelId: string;\n  reflectorModelId: string;\n  observationThreshold: number;\n  reflectionThreshold: number;\n  cavemanObservations: boolean;\n  observeAttachments: 'auto' | boolean;\n  omScope?: 'thread' | 'resource';\n  thinkingLevel: 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n  yolo: boolean;\n  permissionRules: {\n    categories: Record<string, PermissionPolicy>;\n    tools: Record<string, PermissionPolicy>;\n  };\n  smartEditing: boolean;\n  notifications: 'bell' | 'system' | 'both' | 'off';\n  tasks: Array<{\n    id?: string;\n    content: string;\n    status: 'pending' | 'in_progress' | 'completed';\n    activeForm: string;\n  }>;\n  sandboxAllowedPaths: string[];\n  pluginSkillPaths: string[];\n  pluginCommandPaths: string[];\n  pluginInstructions: string[];\n  activePlan: {\n    title: string;\n    plan: string;\n    approvedAt: string;\n  } | null;\n  activeBrowserSettings?: {\n    enabled: boolean;\n    provider: 'stagehand' | 'agent-browser';\n    headless?: boolean;\n    viewport?: {\n      width: number;\n      height: number;\n    };\n    cdpUrl?: string;\n    stagehand?: {\n      env: 'LOCAL' | 'BROWSERBASE';\n      apiKey?: string;\n      projectId?: string;\n    };\n  };\n}\n\nexport const stateSchema = z.object({\n  // Session-scoped selection.\n  // validates state against this schema, so they MUST be declared here — Zod\n  // strips unknown keys on parse, which would otherwise silently discard the\n  // seeded model and leave the controller with no model selected.\n  currentModelId: z.string().optional(),\n  modeId: z.string().optional(),\n  subagentModelId: z.string().optional(),\n  projectPath: z.string().optional(),\n  projectName: z.string().optional(),\n  factoryProjectId: z.string().optional(),\n  projectRepositoryId: z.string().optional(),\n  sandboxId: z.string().optional(),\n  sandboxWorkdir: z.string().optional(),\n  worktreePath: z.string().optional(),\n  branch: z.string().optional(),\n  configDir: z.string().default(DEFAULT_CONFIG_DIR),\n  homeDir: z.string().optional(),\n  gitBranch: z.string().optional(),\n  lastCommand: z.string().optional(),\n  // Observational Memory model settings\n  observerModelId: z.string().default(DEFAULT_OM_MODEL_ID),\n  reflectorModelId: z.string().default(DEFAULT_OM_MODEL_ID),\n  // Observational Memory threshold settings\n  observationThreshold: z.number().default(30_000),\n  reflectionThreshold: z.number().default(40_000),\n  // Whether observations and reflections use the terse caveman-style instruction.\n  // Off by default — caveman style is opt-in via `/om` settings; observers and\n  // reflectors fall back to their built-in (prose) behavior unless enabled.\n  cavemanObservations: z.boolean().default(false),\n  // Whether OM forwards image/file attachment parts to the Observer LLM.\n  // 'auto' (default) checks the provider capabilities registry to decide.\n  // true/false forces the setting regardless of model capabilities.\n  observeAttachments: z.union([z.literal('auto'), z.boolean()]).default('auto'),\n  // Observational Memory scope — 'thread' (per-conversation) or 'resource' (shared across threads)\n  omScope: z.enum(['thread', 'resource']).optional(),\n  // Thinking level for model reasoning effort\n  thinkingLevel: z.enum(['off', 'low', 'medium', 'high', 'xhigh']).default('off'),\n  // YOLO mode — auto-approve all tool calls\n  yolo: z.boolean().default(false),\n  // Permission rules — per-category and per-tool approval policies\n  permissionRules: z\n    .object({\n      categories: z.record(z.string(), z.enum(['allow', 'ask', 'deny'])).default({}),\n      tools: z.record(z.string(), z.enum(['allow', 'ask', 'deny'])).default({}),\n    })\n    .default({ categories: {}, tools: {} }),\n  // Smart editing mode — use AST-based analysis for code edits\n  smartEditing: z.boolean().default(true),\n  // Notification mode — alert when TUI needs user attention\n  notifications: z.enum(['bell', 'system', 'both', 'off']).default('off'),\n  // Task list (ephemeral per-thread, cleared on thread switch/creation)\n  tasks: z\n    .array(\n      z.object({\n        id: z.string().optional(),\n        content: z.string(),\n        status: z.enum(['pending', 'in_progress', 'completed']),\n        activeForm: z.string(),\n      }),\n    )\n    .default([]),\n  // Sandbox allowed paths (per-thread, absolute paths allowed in addition to project root)\n  sandboxAllowedPaths: z.array(z.string()).default([]),\n  // Asset directories contributed by active plugins.\n  pluginSkillPaths: z.array(z.string()).default([]),\n  pluginCommandPaths: z.array(z.string()).default([]),\n  pluginInstructions: z.array(z.string()).default([]),\n  // Active plan (set when a plan is approved in Plan mode)\n  activePlan: z\n    .object({\n      title: z.string(),\n      plan: z.string(),\n      approvedAt: z.string(),\n    })\n    .nullable()\n    .default(null),\n  // Active browser settings (tracks what's actually running vs. what's in the settings file)\n  activeBrowserSettings: z\n    .object({\n      enabled: z.boolean(),\n      provider: z.enum(['stagehand', 'agent-browser']),\n      headless: z.boolean().optional(),\n      viewport: z\n        .object({\n          width: z.number(),\n          height: z.number(),\n        })\n        .optional(),\n      cdpUrl: z.string().optional(),\n      stagehand: z\n        .object({\n          env: z.enum(['LOCAL', 'BROWSERBASE']),\n          apiKey: z.string().optional(),\n          projectId: z.string().optional(),\n        })\n        .optional(),\n    })\n    .optional(),\n});\n"],"mappings":";;;AAiFA,MAAa,cAAc,EAAE,OAAO;CAKlC,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;CACtC,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CACzC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,kBAAkB;CAChD,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CAEjC,iBAAiB,EAAE,OAAO,CAAC,CAAC,QAAQ,mBAAmB;CACvD,kBAAkB,EAAE,OAAO,CAAC,CAAC,QAAQ,mBAAmB;CAExD,sBAAsB,EAAE,OAAO,CAAC,CAAC,QAAQ,GAAM;CAC/C,qBAAqB,EAAE,OAAO,CAAC,CAAC,QAAQ,GAAM;CAI9C,qBAAqB,EAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK;CAI9C,oBAAoB,EAAE,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM;CAE5E,SAAS,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,SAAS;CAEjD,eAAe,EAAE,KAAK;EAAC;EAAO;EAAO;EAAU;EAAQ;CAAO,CAAC,CAAC,CAAC,QAAQ,KAAK;CAE9E,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK;CAE/B,iBAAiB,EACd,OAAO;EACN,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,KAAK;GAAC;GAAS;GAAO;EAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;EAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,KAAK;GAAC;GAAS;GAAO;EAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAC1E,CAAC,CAAC,CACD,QAAQ;EAAE,YAAY,CAAC;EAAG,OAAO,CAAC;CAAE,CAAC;CAExC,cAAc,EAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;CAEtC,eAAe,EAAE,KAAK;EAAC;EAAQ;EAAU;EAAQ;CAAK,CAAC,CAAC,CAAC,QAAQ,KAAK;CAEtE,OAAO,EACJ,MACC,EAAE,OAAO;EACP,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;EACxB,SAAS,EAAE,OAAO;EAClB,QAAQ,EAAE,KAAK;GAAC;GAAW;GAAe;EAAW,CAAC;EACtD,YAAY,EAAE,OAAO;CACvB,CAAC,CACH,CAAC,CACA,QAAQ,CAAC,CAAC;CAEb,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAEnD,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAChD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAClD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;CAElD,YAAY,EACT,OAAO;EACN,OAAO,EAAE,OAAO;EAChB,MAAM,EAAE,OAAO;EACf,YAAY,EAAE,OAAO;CACvB,CAAC,CAAC,CACD,SAAS,CAAC,CACV,QAAQ,IAAI;CAEf,uBAAuB,EACpB,OAAO;EACN,SAAS,EAAE,QAAQ;EACnB,UAAU,EAAE,KAAK,CAAC,aAAa,eAAe,CAAC;EAC/C,UAAU,EAAE,QAAQ,CAAC,CAAC,SAAS;EAC/B,UAAU,EACP,OAAO;GACN,OAAO,EAAE,OAAO;GAChB,QAAQ,EAAE,OAAO;EACnB,CAAC,CAAC,CACD,SAAS;EACZ,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;EAC5B,WAAW,EACR,OAAO;GACN,KAAK,EAAE,KAAK,CAAC,SAAS,aAAa,CAAC;GACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;GAC5B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EACjC,CAAC,CAAC,CACD,SAAS;CACd,CAAC,CAAC,CACD,SAAS;AACd,CAAC"}

package/dist/theme-palette.js

@@ -1,17 +1,21 @@
+//#region src/theme-palette.ts
+/**
+* Mastra brand palette (immutable — stays constant regardless of theme).
+*
+* Lives outside the TUI so non-TUI code (e.g. mode metadata colors in
+* `createMastraCode`) can use brand colors without importing TUI modules.
+* The TUI's `theme.ts` re-exports this and layers contrast adaptation on top.
+*/
 const mastraBrand = {
-  purple: "#7f45e0",
-  // #b588fe brand is too washed out for terminal
-  green: "#16c858",
-  // brand green (dark mode primary)
-  orange: "#fdac53",
-  pink: "#ff69cc",
-  blue: "#2563eb",
-  // #6ccdfb brand is to washed out
-  red: "#DC5663",
-  // #ff4758 too intense
-  yellow: "#e7e67b"
-};
-export {
-  mastraBrand
+	purple: "#7f45e0",
+	green: "#16c858",
+	orange: "#fdac53",
+	pink: "#ff69cc",
+	blue: "#2563eb",
+	red: "#DC5663",
+	yellow: "#e7e67b"
 };
+//#endregion
+export { mastraBrand };
+
 //# sourceMappingURL=theme-palette.js.map

package/dist/theme-palette.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/theme-palette.ts"],"sourcesContent":["/**\n * Mastra brand palette (immutable — stays constant regardless of theme).\n *\n * Lives outside the TUI so non-TUI code (e.g. mode metadata colors in\n * `createMastraCode`) can use brand colors without importing TUI modules.\n * The TUI's `theme.ts` re-exports this and layers contrast adaptation on top.\n */\nexport const mastraBrand = {\n  purple: '#7f45e0', // #b588fe brand is too washed out for terminal\n  green: '#16c858', // brand green (dark mode primary)\n  orange: '#fdac53',\n  pink: '#ff69cc',\n  blue: '#2563eb', // #6ccdfb brand is to washed out\n  red: '#DC5663', // #ff4758 too intense\n  yellow: '#e7e67b',\n} as const;\n"],"mappings":"AAOO,MAAM,cAAc;AAAA,EACzB,QAAQ;AAAA;AAAA,EACR,OAAO;AAAA;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,MAAM;AAAA;AAAA,EACN,KAAK;AAAA;AAAA,EACL,QAAQ;AACV;","names":[]}
+{"version":3,"file":"theme-palette.js","names":[],"sources":["../src/theme-palette.ts"],"sourcesContent":["/**\n * Mastra brand palette (immutable — stays constant regardless of theme).\n *\n * Lives outside the TUI so non-TUI code (e.g. mode metadata colors in\n * `createMastraCode`) can use brand colors without importing TUI modules.\n * The TUI's `theme.ts` re-exports this and layers contrast adaptation on top.\n */\nexport const mastraBrand = {\n  purple: '#7f45e0', // #b588fe brand is too washed out for terminal\n  green: '#16c858', // brand green (dark mode primary)\n  orange: '#fdac53',\n  pink: '#ff69cc',\n  blue: '#2563eb', // #6ccdfb brand is to washed out\n  red: '#DC5663', // #ff4758 too intense\n  yellow: '#e7e67b',\n} as const;\n"],"mappings":";;;;;;;;AAOA,MAAa,cAAc;CACzB,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,MAAM;CACN,MAAM;CACN,KAAK;CACL,QAAQ;AACV"}