@mastra/code-sdk 1.11.0-alpha.3 → 1.11.0-alpha.5

package/dist/acp/agent.d.ts

@@ -1,4 +1,4 @@
-import type { Agent, AgentSideConnection, InitializeRequest, InitializeResponse, NewSessionRequest, NewSessionResponse, PromptRequest, PromptResponse, CancelNotification, ContentBlock, SetSessionConfigOptionRequest, SetSessionConfigOptionResponse } from '@agentclientprotocol/sdk';
+import type { Agent, AgentSideConnection, AuthenticateRequest, InitializeRequest, InitializeResponse, NewSessionRequest, NewSessionResponse, PromptRequest, PromptResponse, CancelNotification, ContentBlock, SetSessionConfigOptionRequest, SetSessionConfigOptionResponse } from '@agentclientprotocol/sdk';
 import type { AgentController, AgentControllerMode, Session } from '@mastra/core/agent-controller';
 import type { ThinkingLevelSetting } from '../thinking.js';
 import type { AcpSkills } from './skills.js';
@@ -24,8 +24,8 @@ export declare class MastraCodeAcpAgent implements Agent {
     private getSession;
     private enqueue;
     dispose(): Promise<void>;
-    initialize(_request: InitializeRequest): Promise<InitializeResponse>;
-    authenticate(): Promise<void>;
+    initialize({ clientCapabilities }: InitializeRequest): Promise<InitializeResponse>;
+    authenticate({ methodId }: AuthenticateRequest): Promise<void>;
     newSession(request: NewSessionRequest): Promise<NewSessionResponse>;
     private createNewSession;
     private refreshCommands;

package/dist/acp/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/acp/agent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,YAAY,EAEZ,6BAA6B,EAC7B,8BAA8B,EAE/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAEnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAM3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,oBAAoB,CAAC;IAC9C,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAW3F,yFAAyF;AACzF,qBAAa,kBAAmB,YAAW,KAAK;IAQ5C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IARhC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiB;IACxD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,CAAgB;gBAGd,UAAU,EAAE,mBAAmB,EAC/B,aAAa,EAAE,iBAAiB;IAGnD,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,OAAO;IASf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgClB,UAAU,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQpE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAUrD,gBAAgB;YAkGhB,eAAe;IAa7B,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,aAAa;IAMf,sBAAsB,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IA0BtG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA2DvD,MAAM,CAAC,YAAY,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvD,cAAc,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5E,wBAAwB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAiB9F;AASD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAiB3E;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GACrD,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,mBAAmB,GAAG,SAAS,CAW3E"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/acp/agent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,KAAK,EACL,mBAAmB,EACnB,mBAAmB,EAEnB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,YAAY,EAEZ,6BAA6B,EAC7B,8BAA8B,EAE/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAInG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAO3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,oBAAoB,CAAC;IAC9C,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AA6E3F,yFAAyF;AACzF,qBAAa,kBAAmB,YAAW,KAAK;IAQ5C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IARhC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiB;IACxD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,CAAgB;gBAGd,UAAU,EAAE,mBAAmB,EAC/B,aAAa,EAAE,iBAAiB;IAGnD,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,OAAO;IASf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgClB,UAAU,CAAC,EAAE,kBAAkB,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IASlF,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BpE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAUrD,gBAAgB;YAkGhB,eAAe;IAa7B,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,aAAa;IAMf,sBAAsB,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IA0BtG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IA2DvD,MAAM,CAAC,YAAY,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvD,cAAc,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5E,wBAAwB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAiB9F;AASD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAiB3E;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GACrD,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,mBAAmB,GAAG,SAAS,CAW3E"}

package/dist/acp/agent.js

@@ -1,11 +1,63 @@
-import { getAvailableThinkingLevelsForModel, isThinkingLevelSetting } from "../thinking.js";
 import { getCurrentVersion } from "../utils/update-check.js";
+import { AuthStorage, PROVIDER_DEFAULT_MODELS, getOAuthProviders } from "../auth/storage.js";
+import { getAvailableThinkingLevelsForModel, isThinkingLevelSetting } from "../thinking.js";
+import { seedProviderOMDefault } from "../onboarding/om-settings.js";
+import { openUrlInBrowser } from "../utils/open-url.js";
 import { withCleanupFailure } from "./errors.js";
 import { handleAgentControllerEvent } from "./event-mapper.js";
 import { expandSkillCommand, listSkillCommands } from "./skills.js";
 import { isAbsolute } from "path";
 import { PROTOCOL_VERSION, RequestError } from "@agentclientprotocol/sdk";
 //#region src/acp/agent.ts
+const TERMINAL_LOGIN_METHOD_ID = "mastracode-login";
+const BROWSER_LOGIN_PROVIDER_IDS = [
+	"openai-codex",
+	"kimi-for-coding",
+	"xai"
+];
+const TERMINAL_LOGIN_PROVIDER_IDS = ["anthropic", "github-copilot"];
+function terminalLogin(id, name, description, loginArgs) {
+	return {
+		id,
+		name,
+		description,
+		type: "terminal",
+		args: loginArgs,
+		_meta: { "terminal-auth": {
+			command: process.execPath,
+			args: [...process.argv.slice(1, 2), ...loginArgs],
+			label: name
+		} }
+	};
+}
+function listAuthMethods({ auth, _meta } = {}) {
+	const providers = getOAuthProviders();
+	const methods = providers.filter((provider) => BROWSER_LOGIN_PROVIDER_IDS.includes(provider.id)).map((provider) => ({
+		id: provider.id,
+		name: `Log in with ${provider.name}`,
+		description: "Opens your browser to sign in"
+	}));
+	if (!auth?.terminal && _meta?.["terminal-auth"] !== true) return methods;
+	return [
+		...methods,
+		...providers.filter((provider) => TERMINAL_LOGIN_PROVIDER_IDS.includes(provider.id)).map((provider) => terminalLogin(provider.id, `Log in with ${provider.name}`, "Sign in from a terminal", [
+			"login",
+			"--provider",
+			provider.id
+		])),
+		terminalLogin(TERMINAL_LOGIN_METHOD_ID, "Log in with Mastra Code", "Sign in to another provider or add an API key from a terminal", ["login"])
+	];
+}
+function hasUsableModel(available, currentModelId) {
+	if (available.some((model) => model.hasApiKey)) return true;
+	return currentModelId !== "" && !available.some((model) => model.id === currentModelId);
+}
+function credentialedDefaultModel(available, currentModelId) {
+	const current = available.find((model) => model.id === currentModelId);
+	if (!current || current.hasApiKey) return void 0;
+	const credentialed = new Set(available.filter((model) => model.hasApiKey).map((model) => model.id));
+	return Object.values(PROVIDER_DEFAULT_MODELS).find((modelId) => credentialed.has(modelId));
+}
 /** One ACP connection, with an independent Mastra Code runtime for each conversation. */
 var MastraCodeAcpAgent = class {
 	connection;
@@ -54,7 +106,7 @@ var MastraCodeAcpAgent = class {
 		});
 		return this.disposal;
 	}
-	async initialize(_request) {
+	async initialize({ clientCapabilities }) {
 		return {
 			protocolVersion: PROTOCOL_VERSION,
 			agentInfo: {
@@ -68,11 +120,30 @@ var MastraCodeAcpAgent = class {
 					http: true,
 					sse: false
 				}
-			}
+			},
+			authMethods: listAuthMethods(clientCapabilities)
 		};
 	}
-	async authenticate() {
-		throw RequestError.invalidParams(void 0, "Configure authentication through Mastra Code before starting ACP");
+	async authenticate({ methodId }) {
+		if (methodId === TERMINAL_LOGIN_METHOD_ID || TERMINAL_LOGIN_PROVIDER_IDS.includes(methodId)) return;
+		if (!BROWSER_LOGIN_PROVIDER_IDS.includes(methodId)) throw RequestError.invalidParams(void 0, `Unknown authentication method: ${methodId}`);
+		const needsTerminal = () => RequestError.internalError(void 0, "Browser sign-in can't finish on its own. Run `mastracode login` in a terminal to sign in.");
+		await new AuthStorage().login(methodId, {
+			authMode: "browser",
+			onAuth: ({ url, userCode }) => {
+				if (userCode && !url.includes(userCode)) throw needsTerminal();
+				process.stderr.write(`Open ${url} to sign in\n`);
+				openUrlInBrowser(url);
+			},
+			onPrompt: async () => {
+				throw needsTerminal();
+			}
+		});
+		try {
+			seedProviderOMDefault(methodId);
+		} catch (error) {
+			process.stderr.write(`[acp] memory model unchanged after sign-in: ${error}\n`);
+		}
 	}
 	newSession(request) {
 		const creating = Promise.resolve().then(() => this.createNewSession(request));
@@ -86,23 +157,23 @@ var MastraCodeAcpAgent = class {
 		const runtime = await this.createSession(request);
 		try {
 			if (this.disposed) throw RequestError.internalError(void 0, "ACP connection is closed");
+			const available = await runtime.controller.listAvailableModels();
+			if (!hasUsableModel(available, runtime.session.model.get() ?? "")) throw RequestError.authRequired(void 0, "Sign in to a model provider or add an API key to use Mastra Code");
 			const thread = await runtime.session.thread.create();
 			await runtime.session.thread.switch({ threadId: thread.id });
-			let models;
-			try {
-				const available = await runtime.controller.listAvailableModels();
-				models = {
-					currentModelId: runtime.session.model.get() ?? "",
-					availableModels: includeCurrentModel([...new Map(available.filter((model) => model.hasApiKey || model.id === runtime.session.model.get()).map((model) => [model.id, {
-						modelId: model.id,
-						name: model.hasApiKey ? model.id : `${model.id} (provider not configured)`
-					}])).values()], runtime.session.model.get() ?? "")
-				};
-			} catch {}
+			const defaultModelId = credentialedDefaultModel(available, runtime.session.model.get() ?? "");
+			if (defaultModelId) await runtime.session.model.switch({ modelId: defaultModelId });
+			const models = {
+				currentModelId: runtime.session.model.get() ?? "",
+				availableModels: includeCurrentModel([...new Map(available.filter((model) => model.hasApiKey || model.id === runtime.session.model.get()).map((model) => [model.id, {
+					modelId: model.id,
+					name: model.hasApiKey ? model.id : `${model.id} (provider not configured)`
+				}])).values()], runtime.session.model.get() ?? "")
+			};
 			if (this.disposed) throw RequestError.internalError(void 0, "ACP connection is closed");
 			const entry = {
 				...runtime,
-				models: models?.availableModels ?? [],
+				models: models.availableModels,
 				state: null,
 				queue: Promise.resolve(),
 				turns: /* @__PURE__ */ new Set(),

package/dist/acp/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","names":[],"sources":["../../src/acp/agent.ts"],"sourcesContent":["import { isAbsolute } from 'node:path';\nimport { PROTOCOL_VERSION, RequestError } from '@agentclientprotocol/sdk';\nimport type {\n  Agent,\n  AgentSideConnection,\n  InitializeRequest,\n  InitializeResponse,\n  NewSessionRequest,\n  NewSessionResponse,\n  PromptRequest,\n  PromptResponse,\n  CancelNotification,\n  ContentBlock,\n  SessionConfigOption,\n  SetSessionConfigOptionRequest,\n  SetSessionConfigOptionResponse,\n  AvailableCommand,\n} from '@agentclientprotocol/sdk';\nimport type { AgentController, AgentControllerMode, Session } from '@mastra/core/agent-controller';\nimport { getAvailableThinkingLevelsForModel, isThinkingLevelSetting } from '../thinking.js';\nimport type { ThinkingLevelSetting } from '../thinking.js';\nimport { getCurrentVersion } from '../utils/update-check.js';\nimport { withCleanupFailure } from './errors.js';\nimport { handleAgentControllerEvent } from './event-mapper.js';\nimport type { PromptState } from './event-mapper.js';\nimport { expandSkillCommand, listSkillCommands } from './skills.js';\nimport type { AcpSkills } from './skills.js';\n\nexport interface AcpSessionRuntime {\n  controller: AgentController;\n  session: Session;\n  modes: AgentControllerMode[];\n  getThinkingLevel?: () => ThinkingLevelSetting;\n  getSkills?: () => Promise<AcpSkills | undefined>;\n  cleanup?: () => Promise<void>;\n}\n\nexport type AcpSessionFactory = (request: NewSessionRequest) => Promise<AcpSessionRuntime>;\n\ninterface SessionEntry extends AcpSessionRuntime {\n  models: { modelId: string; name: string }[];\n  state: PromptState | null;\n  queue: Promise<void>;\n  turns: Set<{ cancelled: boolean }>;\n  unsubscribe: () => void;\n  commands?: AvailableCommand[];\n}\n\n/** One ACP connection, with an independent Mastra Code runtime for each conversation. */\nexport class MastraCodeAcpAgent implements Agent {\n  private readonly sessions = new Map<string, SessionEntry>();\n  private readonly pendingCreations = new Set<Promise<NewSessionResponse>>();\n  private readonly startupCleanupFailures: unknown[] = [];\n  private disposed = false;\n  private disposal?: Promise<void>;\n\n  constructor(\n    private readonly connection: AgentSideConnection,\n    private readonly createSession: AcpSessionFactory,\n  ) {}\n\n  private getSession(sessionId: string): SessionEntry {\n    const entry = this.sessions.get(sessionId);\n    if (!entry || this.disposed) throw RequestError.invalidParams({ sessionId }, 'Unknown ACP session');\n    return entry;\n  }\n\n  private enqueue<T>(entry: SessionEntry, operation: () => Promise<T>): Promise<T> {\n    const result = entry.queue.then(operation);\n    entry.queue = result.then(\n      () => {},\n      () => {},\n    );\n    return result;\n  }\n\n  dispose(): Promise<void> {\n    if (this.disposal) return this.disposal;\n    this.disposed = true;\n    const entries = [...this.sessions.values()];\n    this.sessions.clear();\n    const cleanup = Promise.allSettled([\n      // A runtime under construction owns its cleanup until it joins sessions.\n      Promise.allSettled([...this.pendingCreations]),\n      ...entries.map(async entry => {\n        for (const turn of entry.turns) turn.cancelled = true;\n        if (entry.state) {\n          entry.state.cancelled = true;\n          entry.session.abort();\n          entry.state?.resolve('aborted');\n        }\n        entry.unsubscribe();\n        await entry.cleanup?.();\n      }),\n    ]).then(results => {\n      const failures = results.filter(result => result.status === 'rejected').map(result => result.reason);\n      failures.push(...this.startupCleanupFailures);\n      if (failures.length) throw new AggregateError(failures, 'ACP session cleanup failed');\n    });\n    // A provider or MCP startup can stall. Keep its cleanup ownership, but let\n    // the host terminate the connection if shutdown cannot finish in time.\n    this.disposal = new Promise<void>((resolve, reject) => {\n      const timeout = setTimeout(() => reject(new Error('ACP shutdown timed out after 10 seconds')), 10_000);\n      void cleanup.then(resolve, reject).finally(() => clearTimeout(timeout));\n    });\n    return this.disposal;\n  }\n\n  async initialize(_request: InitializeRequest): Promise<InitializeResponse> {\n    return {\n      protocolVersion: PROTOCOL_VERSION,\n      agentInfo: { name: 'mastracode', title: 'Mastra Code', version: getCurrentVersion() },\n      agentCapabilities: { loadSession: false, mcpCapabilities: { http: true, sse: false } },\n    };\n  }\n\n  async authenticate(): Promise<void> {\n    throw RequestError.invalidParams(undefined, 'Configure authentication through Mastra Code before starting ACP');\n  }\n\n  newSession(request: NewSessionRequest): Promise<NewSessionResponse> {\n    const creating = Promise.resolve().then(() => this.createNewSession(request));\n    this.pendingCreations.add(creating);\n    void creating.then(\n      () => this.pendingCreations.delete(creating),\n      () => this.pendingCreations.delete(creating),\n    );\n    return creating;\n  }\n\n  private async createNewSession(request: NewSessionRequest): Promise<NewSessionResponse> {\n    if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n    if (!isAbsolute(request.cwd)) throw RequestError.invalidParams(undefined, 'cwd must be an absolute path');\n    const runtime = await this.createSession(request);\n    try {\n      if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n      const thread = await runtime.session.thread.create();\n      await runtime.session.thread.switch({ threadId: thread.id });\n      let models: NewSessionResponse['models'];\n      try {\n        const available = await runtime.controller.listAvailableModels();\n        models = {\n          currentModelId: runtime.session.model.get() ?? '',\n          availableModels: includeCurrentModel(\n            [\n              ...new Map(\n                available\n                  .filter(model => model.hasApiKey || model.id === runtime.session.model.get())\n                  .map(\n                    model =>\n                      [\n                        model.id,\n                        {\n                          modelId: model.id,\n                          name: model.hasApiKey ? model.id : `${model.id} (provider not configured)`,\n                        },\n                      ] as const,\n                  ),\n              ).values(),\n            ],\n            runtime.session.model.get() ?? '',\n          ),\n        };\n      } catch {\n        // Discovery may be unavailable before provider authentication.\n      }\n      if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n      const entry: SessionEntry = {\n        ...runtime,\n        models: models?.availableModels ?? [],\n        state: null,\n        queue: Promise.resolve(),\n        turns: new Set(),\n        unsubscribe: () => {},\n        commands: [],\n      };\n      if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n      entry.unsubscribe = runtime.session.subscribe(event => {\n        handleAgentControllerEvent(event, entry.state, this.connection, entry.session);\n        if (event.type === 'mode_changed') {\n          void this.connection\n            .sessionUpdate({\n              sessionId: thread.id,\n              update: { sessionUpdate: 'current_mode_update', currentModeId: entry.session.mode.get() },\n            })\n            .catch(error => process.stderr.write(`[acp] mode update failed: ${error}\\n`));\n        }\n        if (\n          event.type === 'mode_changed' ||\n          event.type === 'model_changed' ||\n          (event.type === 'state_changed' && event.changedKeys.includes('thinkingLevel'))\n        ) {\n          void this.connection\n            .sessionUpdate({\n              sessionId: thread.id,\n              update: { sessionUpdate: 'config_option_update', configOptions: this.configOptions(entry) },\n            })\n            .catch(error => process.stderr.write(`[acp] configuration update failed: ${error}\\n`));\n        }\n      });\n      const response: NewSessionResponse = {\n        sessionId: thread.id,\n        modes: {\n          currentModeId: runtime.session.mode.get(),\n          availableModes: runtime.modes.map(mode => ({ id: mode.id, name: mode.name ?? mode.id })),\n        },\n        models,\n        configOptions: this.configOptions(entry),\n      };\n      this.sessions.set(thread.id, entry);\n      // Let the SDK send session/new before clients receive updates for this ID.\n      setImmediate(() => {\n        void this.enqueue(entry, async () => {\n          if (!this.disposed) await this.refreshCommands(thread.id, entry);\n        }).catch(error => process.stderr.write(`[acp] command discovery failed: ${error}\\n`));\n      });\n      return response;\n    } catch (error) {\n      try {\n        await runtime.cleanup?.();\n      } catch (cleanupError) {\n        if (this.disposed) this.startupCleanupFailures.push(cleanupError);\n        throw withCleanupFailure(error, cleanupError);\n      }\n      throw error;\n    }\n  }\n\n  private async refreshCommands(sessionId: string, entry: SessionEntry): Promise<AcpSkills | undefined> {\n    const skills = await entry.getSkills?.();\n    const commands = await listSkillCommands(skills);\n    if (JSON.stringify(commands) !== JSON.stringify(entry.commands)) {\n      await this.connection.sessionUpdate({\n        sessionId,\n        update: { sessionUpdate: 'available_commands_update', availableCommands: commands },\n      });\n      entry.commands = commands;\n    }\n    return skills;\n  }\n\n  private configOptions(entry: SessionEntry): SessionConfigOption[] {\n    const modelId = entry.session.model.get() ?? '';\n    const options: SessionConfigOption[] = [];\n    const models = includeCurrentModel(entry.models, modelId);\n    if (models.length)\n      options.push({\n        id: 'model',\n        name: 'Model',\n        category: 'model',\n        type: 'select',\n        currentValue: modelId,\n        options: models.map(model => ({ value: model.modelId, name: model.name })),\n      });\n    options.push({\n      id: 'mode',\n      name: 'Mode',\n      category: 'mode',\n      type: 'select',\n      currentValue: entry.session.mode.get(),\n      options: entry.modes.map(mode => ({ value: mode.id, name: mode.name ?? mode.id })),\n    });\n    if (entry.getThinkingLevel)\n      options.push({\n        id: 'thought_level',\n        name: 'Reasoning effort',\n        category: 'thought_level',\n        type: 'select',\n        description: 'Requested reasoning level. The provider may adjust it for the selected model.',\n        currentValue: this.thinkingLevel(entry),\n        options: getAvailableThinkingLevelsForModel(modelId).map(value => ({\n          value,\n          name: value[0]!.toUpperCase() + value.slice(1),\n        })),\n      });\n    return options;\n  }\n\n  private thinkingLevel(entry: SessionEntry): ThinkingLevelSetting {\n    const level = entry.getThinkingLevel?.() ?? 'off';\n    const levels = getAvailableThinkingLevelsForModel(entry.session.model.get() ?? '');\n    return levels.includes(level) ? level : 'xhigh';\n  }\n\n  async setSessionConfigOption(params: SetSessionConfigOptionRequest): Promise<SetSessionConfigOptionResponse> {\n    const entry = this.getSession(params.sessionId);\n    return this.enqueue(entry, async () => {\n      this.getSession(params.sessionId);\n      const option = this.configOptions(entry).find(option => option.id === params.configId);\n      if (\n        !option ||\n        option.type !== 'select' ||\n        !option.options.some(item => 'value' in item && item.value === params.value)\n      ) {\n        throw RequestError.invalidParams(undefined, 'Unknown session configuration selection');\n      }\n      if (params.configId === 'model') {\n        await entry.session.model.switch({ modelId: String(params.value) });\n      } else if (params.configId === 'mode') {\n        await entry.session.mode.switch({ modeId: String(params.value) });\n      } else if (isThinkingLevelSetting(params.value)) {\n        await entry.session.state.set({ thinkingLevel: params.value });\n      }\n      if (entry.getThinkingLevel && entry.getThinkingLevel() !== this.thinkingLevel(entry)) {\n        await entry.session.state.set({ thinkingLevel: this.thinkingLevel(entry) });\n      }\n      return { configOptions: this.configOptions(entry) };\n    });\n  }\n\n  async prompt(request: PromptRequest): Promise<PromptResponse> {\n    const entry = this.getSession(request.sessionId);\n    const content = extractTextFromContentBlocks(request.prompt);\n    const turn = { cancelled: false };\n    entry.turns.add(turn);\n    try {\n      return await this.enqueue(entry, async () => {\n        if (turn.cancelled || this.disposed) return { stopReason: 'cancelled' };\n        const usage: PromptState['usage'] = { promptTokens: 0, completionTokens: 0, totalTokens: 0 };\n        let complete!: PromptState['resolve'];\n        const completion = new Promise<Parameters<PromptState['resolve']>[0]>(resolve => {\n          complete = resolve;\n        });\n        const state: PromptState = {\n          sessionId: request.sessionId,\n          usage,\n          resolve: reason => {\n            state.finished = true;\n            complete(reason);\n          },\n        };\n        entry.state = state;\n        try {\n          const skills = await this.refreshCommands(request.sessionId, entry);\n          const expanded = await expandSkillCommand(content, skills, entry.commands ?? []);\n          if (turn.cancelled || this.disposed) return { stopReason: 'cancelled' };\n          await entry.session.sendMessage({ content: expanded });\n          const reason = await completion;\n          if (reason === 'error' && !state.cancelled && !state.stopReason) {\n            throw RequestError.internalError(undefined, state.error?.message ?? 'Mastra Code turn failed');\n          }\n          return {\n            stopReason: state.cancelled ? 'cancelled' : (state.stopReason ?? mapStopReason(reason)),\n            usage: {\n              inputTokens: usage.promptTokens,\n              outputTokens: usage.completionTokens,\n              totalTokens: usage.totalTokens,\n              thoughtTokens: usage.reasoningTokens,\n              cachedReadTokens: usage.cachedInputTokens,\n              cachedWriteTokens: usage.cacheCreationInputTokens,\n            },\n          };\n        } catch (error) {\n          if (state.cancelled) return { stopReason: 'cancelled' };\n          if (error instanceof RequestError) throw error;\n          throw RequestError.internalError(\n            undefined,\n            error instanceof Error ? error.message : 'Mastra Code turn failed',\n          );\n        } finally {\n          state.finished = true;\n          if (entry.state === state) entry.state = null;\n        }\n      });\n    } finally {\n      entry.turns.delete(turn);\n    }\n  }\n\n  async cancel(notification: CancelNotification): Promise<void> {\n    const entry = this.sessions.get(notification.sessionId);\n    if (!entry) return;\n    for (const turn of entry.turns) turn.cancelled = true;\n    if (entry.state && !entry.state.finished && !entry.state.cancelled) {\n      const state = entry.state;\n      state.cancelled = true;\n      // Persist denial before aborting, otherwise a parked snapshot can replay on the next turn.\n      for (const deny of state.cancelSuspensions?.values() ?? []) {\n        try {\n          await deny();\n        } catch {\n          /* Still abort if the suspended run is no longer available. */\n        }\n      }\n      state.cancelSuspensions?.clear();\n      if (entry.state !== state) return;\n      entry.session.abort();\n      // A suspended run has already ended and will not emit another agent_end.\n      if (entry.state?.suspended) {\n        entry.session.stream.detach();\n        entry.state.resolve('aborted');\n      }\n    }\n  }\n\n  async setSessionMode(params: { sessionId: string; modeId: string }): Promise<void> {\n    const entry = this.getSession(params.sessionId);\n    if (!entry.modes.some(mode => mode.id === params.modeId))\n      throw RequestError.invalidParams(undefined, 'Unknown mode');\n    await this.enqueue(entry, async () => {\n      if (this.disposed) return;\n      await entry.session.mode.switch({ modeId: params.modeId });\n    });\n  }\n\n  async unstable_setSessionModel(params: { sessionId: string; modelId: string }): Promise<void> {\n    const entry = this.getSession(params.sessionId);\n    await this.enqueue(entry, async () => {\n      if (this.disposed) return;\n      if (\n        !includeCurrentModel(entry.models, entry.session.model.get() ?? '').some(\n          model => model.modelId === params.modelId,\n        )\n      ) {\n        throw RequestError.invalidParams(\n          undefined,\n          'Model is unavailable or its provider is not configured. Refresh the model list.',\n        );\n      }\n      await entry.session.model.switch({ modelId: params.modelId });\n    });\n  }\n}\n\nfunction includeCurrentModel(models: SessionEntry['models'], currentModelId: string): SessionEntry['models'] {\n  // Saved/custom model IDs may work even when discovery only returns a gateway-qualified alias.\n  return currentModelId && !models.some(model => model.modelId === currentModelId)\n    ? [{ modelId: currentModelId, name: currentModelId }, ...models]\n    : models;\n}\n\nexport function extractTextFromContentBlocks(blocks: ContentBlock[]): string {\n  const parts: string[] = [];\n  for (const block of blocks) {\n    if (block.type === 'text') {\n      parts.push(block.text);\n    } else if (block.type === 'resource_link') {\n      parts.push(`[resource: ${block.uri}]`);\n    } else if (block.type === 'resource') {\n      parts.push(`[resource: ${block.resource.uri}]`);\n      if (!('text' in block.resource))\n        throw RequestError.invalidParams(undefined, 'Binary prompt resources are not supported');\n      parts.push(block.resource.text);\n    } else {\n      throw RequestError.invalidParams(undefined, `Unsupported prompt content: ${block.type}`);\n    }\n  }\n  return parts.join('\\n');\n}\n\nexport function mapStopReason(\n  reason: 'complete' | 'aborted' | 'error' | 'suspended',\n): 'end_turn' | 'cancelled' | 'max_tokens' | 'max_turn_requests' | 'refusal' {\n  switch (reason) {\n    case 'complete':\n      return 'end_turn';\n    case 'aborted':\n      return 'cancelled';\n    case 'error':\n      throw RequestError.internalError(undefined, 'Mastra Code turn failed');\n    case 'suspended':\n      return 'end_turn';\n  }\n}\n"],"mappings":";;;;;;;;;AAiDA,IAAa,qBAAb,MAAiD;CAQ5B;CACA;CARnB,2BAA4B,IAAI,IAA0B;CAC1D,mCAAoC,IAAI,IAAiC;CACzE,yBAAqD,CAAC;CACtD,WAAmB;CACnB;CAEA,YACE,YACA,eACA;EAFiB,KAAA,aAAA;EACA,KAAA,gBAAA;CAChB;CAEH,WAAmB,WAAiC;EAClD,MAAM,QAAQ,KAAK,SAAS,IAAI,SAAS;EACzC,IAAI,CAAC,SAAS,KAAK,UAAU,MAAM,aAAa,cAAc,EAAE,UAAU,GAAG,qBAAqB;EAClG,OAAO;CACT;CAEA,QAAmB,OAAqB,WAAyC;EAC/E,MAAM,SAAS,MAAM,MAAM,KAAK,SAAS;EACzC,MAAM,QAAQ,OAAO,WACb,CAAC,SACD,CAAC,CACT;EACA,OAAO;CACT;CAEA,UAAyB;EACvB,IAAI,KAAK,UAAU,OAAO,KAAK;EAC/B,KAAK,WAAW;EAChB,MAAM,UAAU,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC;EAC1C,KAAK,SAAS,MAAM;EACpB,MAAM,UAAU,QAAQ,WAAW,CAEjC,QAAQ,WAAW,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAC7C,GAAG,QAAQ,IAAI,OAAM,UAAS;GAC5B,KAAK,MAAM,QAAQ,MAAM,OAAO,KAAK,YAAY;GACjD,IAAI,MAAM,OAAO;IACf,MAAM,MAAM,YAAY;IACxB,MAAM,QAAQ,MAAM;IACpB,MAAM,OAAO,QAAQ,SAAS;GAChC;GACA,MAAM,YAAY;GAClB,MAAM,MAAM,UAAU;EACxB,CAAC,CACH,CAAC,CAAC,CAAC,MAAK,YAAW;GACjB,MAAM,WAAW,QAAQ,QAAO,WAAU,OAAO,WAAW,UAAU,CAAC,CAAC,KAAI,WAAU,OAAO,MAAM;GACnG,SAAS,KAAK,GAAG,KAAK,sBAAsB;GAC5C,IAAI,SAAS,QAAQ,MAAM,IAAI,eAAe,UAAU,4BAA4B;EACtF,CAAC;EAGD,KAAK,WAAW,IAAI,SAAe,SAAS,WAAW;GACrD,MAAM,UAAU,iBAAiB,uBAAO,IAAI,MAAM,yCAAyC,CAAC,GAAG,GAAM;GACrG,QAAa,KAAK,SAAS,MAAM,CAAC,CAAC,cAAc,aAAa,OAAO,CAAC;EACxE,CAAC;EACD,OAAO,KAAK;CACd;CAEA,MAAM,WAAW,UAA0D;EACzE,OAAO;GACL,iBAAiB;GACjB,WAAW;IAAE,MAAM;IAAc,OAAO;IAAe,SAAS,kBAAkB;GAAE;GACpF,mBAAmB;IAAE,aAAa;IAAO,iBAAiB;KAAE,MAAM;KAAM,KAAK;IAAM;GAAE;EACvF;CACF;CAEA,MAAM,eAA8B;EAClC,MAAM,aAAa,cAAc,KAAA,GAAW,kEAAkE;CAChH;CAEA,WAAW,SAAyD;EAClE,MAAM,WAAW,QAAQ,QAAQ,CAAC,CAAC,WAAW,KAAK,iBAAiB,OAAO,CAAC;EAC5E,KAAK,iBAAiB,IAAI,QAAQ;EAClC,SAAc,WACN,KAAK,iBAAiB,OAAO,QAAQ,SACrC,KAAK,iBAAiB,OAAO,QAAQ,CAC7C;EACA,OAAO;CACT;CAEA,MAAc,iBAAiB,SAAyD;EACtF,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;EACzF,IAAI,CAAC,WAAW,QAAQ,GAAG,GAAG,MAAM,aAAa,cAAc,KAAA,GAAW,8BAA8B;EACxG,MAAM,UAAU,MAAM,KAAK,cAAc,OAAO;EAChD,IAAI;GACF,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;GACzF,MAAM,SAAS,MAAM,QAAQ,QAAQ,OAAO,OAAO;GACnD,MAAM,QAAQ,QAAQ,OAAO,OAAO,EAAE,UAAU,OAAO,GAAG,CAAC;GAC3D,IAAI;GACJ,IAAI;IACF,MAAM,YAAY,MAAM,QAAQ,WAAW,oBAAoB;IAC/D,SAAS;KACP,gBAAgB,QAAQ,QAAQ,MAAM,IAAI,KAAK;KAC/C,iBAAiB,oBACf,CACE,GAAG,IAAI,IACL,UACG,QAAO,UAAS,MAAM,aAAa,MAAM,OAAO,QAAQ,QAAQ,MAAM,IAAI,CAAC,CAAC,CAC5E,KACC,UACE,CACE,MAAM,IACN;MACE,SAAS,MAAM;MACf,MAAM,MAAM,YAAY,MAAM,KAAK,GAAG,MAAM,GAAG;KACjD,CACF,CACJ,CACJ,CAAC,CAAC,OAAO,CACX,GACA,QAAQ,QAAQ,MAAM,IAAI,KAAK,EACjC;IACF;GACF,QAAQ,CAER;GACA,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;GACzF,MAAM,QAAsB;IAC1B,GAAG;IACH,QAAQ,QAAQ,mBAAmB,CAAC;IACpC,OAAO;IACP,OAAO,QAAQ,QAAQ;IACvB,uBAAO,IAAI,IAAI;IACf,mBAAmB,CAAC;IACpB,UAAU,CAAC;GACb;GACA,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;GACzF,MAAM,cAAc,QAAQ,QAAQ,WAAU,UAAS;IACrD,2BAA2B,OAAO,MAAM,OAAO,KAAK,YAAY,MAAM,OAAO;IAC7E,IAAI,MAAM,SAAS,gBACjB,KAAU,WACP,cAAc;KACb,WAAW,OAAO;KAClB,QAAQ;MAAE,eAAe;MAAuB,eAAe,MAAM,QAAQ,KAAK,IAAI;KAAE;IAC1F,CAAC,CAAC,CACD,OAAM,UAAS,QAAQ,OAAO,MAAM,6BAA6B,MAAM,GAAG,CAAC;IAEhF,IACE,MAAM,SAAS,kBACf,MAAM,SAAS,mBACd,MAAM,SAAS,mBAAmB,MAAM,YAAY,SAAS,eAAe,GAE7E,KAAU,WACP,cAAc;KACb,WAAW,OAAO;KAClB,QAAQ;MAAE,eAAe;MAAwB,eAAe,KAAK,cAAc,KAAK;KAAE;IAC5F,CAAC,CAAC,CACD,OAAM,UAAS,QAAQ,OAAO,MAAM,sCAAsC,MAAM,GAAG,CAAC;GAE3F,CAAC;GACD,MAAM,WAA+B;IACnC,WAAW,OAAO;IAClB,OAAO;KACL,eAAe,QAAQ,QAAQ,KAAK,IAAI;KACxC,gBAAgB,QAAQ,MAAM,KAAI,UAAS;MAAE,IAAI,KAAK;MAAI,MAAM,KAAK,QAAQ,KAAK;KAAG,EAAE;IACzF;IACA;IACA,eAAe,KAAK,cAAc,KAAK;GACzC;GACA,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK;GAElC,mBAAmB;IACjB,KAAU,QAAQ,OAAO,YAAY;KACnC,IAAI,CAAC,KAAK,UAAU,MAAM,KAAK,gBAAgB,OAAO,IAAI,KAAK;IACjE,CAAC,CAAC,CAAC,OAAM,UAAS,QAAQ,OAAO,MAAM,mCAAmC,MAAM,GAAG,CAAC;GACtF,CAAC;GACD,OAAO;EACT,SAAS,OAAO;GACd,IAAI;IACF,MAAM,QAAQ,UAAU;GAC1B,SAAS,cAAc;IACrB,IAAI,KAAK,UAAU,KAAK,uBAAuB,KAAK,YAAY;IAChE,MAAM,mBAAmB,OAAO,YAAY;GAC9C;GACA,MAAM;EACR;CACF;CAEA,MAAc,gBAAgB,WAAmB,OAAqD;EACpG,MAAM,SAAS,MAAM,MAAM,YAAY;EACvC,MAAM,WAAW,MAAM,kBAAkB,MAAM;EAC/C,IAAI,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,MAAM,QAAQ,GAAG;GAC/D,MAAM,KAAK,WAAW,cAAc;IAClC;IACA,QAAQ;KAAE,eAAe;KAA6B,mBAAmB;IAAS;GACpF,CAAC;GACD,MAAM,WAAW;EACnB;EACA,OAAO;CACT;CAEA,cAAsB,OAA4C;EAChE,MAAM,UAAU,MAAM,QAAQ,MAAM,IAAI,KAAK;EAC7C,MAAM,UAAiC,CAAC;EACxC,MAAM,SAAS,oBAAoB,MAAM,QAAQ,OAAO;EACxD,IAAI,OAAO,QACT,QAAQ,KAAK;GACX,IAAI;GACJ,MAAM;GACN,UAAU;GACV,MAAM;GACN,cAAc;GACd,SAAS,OAAO,KAAI,WAAU;IAAE,OAAO,MAAM;IAAS,MAAM,MAAM;GAAK,EAAE;EAC3E,CAAC;EACH,QAAQ,KAAK;GACX,IAAI;GACJ,MAAM;GACN,UAAU;GACV,MAAM;GACN,cAAc,MAAM,QAAQ,KAAK,IAAI;GACrC,SAAS,MAAM,MAAM,KAAI,UAAS;IAAE,OAAO,KAAK;IAAI,MAAM,KAAK,QAAQ,KAAK;GAAG,EAAE;EACnF,CAAC;EACD,IAAI,MAAM,kBACR,QAAQ,KAAK;GACX,IAAI;GACJ,MAAM;GACN,UAAU;GACV,MAAM;GACN,aAAa;GACb,cAAc,KAAK,cAAc,KAAK;GACtC,SAAS,mCAAmC,OAAO,CAAC,CAAC,KAAI,WAAU;IACjE;IACA,MAAM,MAAM,EAAE,CAAE,YAAY,IAAI,MAAM,MAAM,CAAC;GAC/C,EAAE;EACJ,CAAC;EACH,OAAO;CACT;CAEA,cAAsB,OAA2C;EAC/D,MAAM,QAAQ,MAAM,mBAAmB,KAAK;EAE5C,OADe,mCAAmC,MAAM,QAAQ,MAAM,IAAI,KAAK,EACnE,CAAC,CAAC,SAAS,KAAK,IAAI,QAAQ;CAC1C;CAEA,MAAM,uBAAuB,QAAgF;EAC3G,MAAM,QAAQ,KAAK,WAAW,OAAO,SAAS;EAC9C,OAAO,KAAK,QAAQ,OAAO,YAAY;GACrC,KAAK,WAAW,OAAO,SAAS;GAChC,MAAM,SAAS,KAAK,cAAc,KAAK,CAAC,CAAC,MAAK,WAAU,OAAO,OAAO,OAAO,QAAQ;GACrF,IACE,CAAC,UACD,OAAO,SAAS,YAChB,CAAC,OAAO,QAAQ,MAAK,SAAQ,WAAW,QAAQ,KAAK,UAAU,OAAO,KAAK,GAE3E,MAAM,aAAa,cAAc,KAAA,GAAW,yCAAyC;GAEvF,IAAI,OAAO,aAAa,SACtB,MAAM,MAAM,QAAQ,MAAM,OAAO,EAAE,SAAS,OAAO,OAAO,KAAK,EAAE,CAAC;QAC7D,IAAI,OAAO,aAAa,QAC7B,MAAM,MAAM,QAAQ,KAAK,OAAO,EAAE,QAAQ,OAAO,OAAO,KAAK,EAAE,CAAC;QAC3D,IAAI,uBAAuB,OAAO,KAAK,GAC5C,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,eAAe,OAAO,MAAM,CAAC;GAE/D,IAAI,MAAM,oBAAoB,MAAM,iBAAiB,MAAM,KAAK,cAAc,KAAK,GACjF,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,eAAe,KAAK,cAAc,KAAK,EAAE,CAAC;GAE5E,OAAO,EAAE,eAAe,KAAK,cAAc,KAAK,EAAE;EACpD,CAAC;CACH;CAEA,MAAM,OAAO,SAAiD;EAC5D,MAAM,QAAQ,KAAK,WAAW,QAAQ,SAAS;EAC/C,MAAM,UAAU,6BAA6B,QAAQ,MAAM;EAC3D,MAAM,OAAO,EAAE,WAAW,MAAM;EAChC,MAAM,MAAM,IAAI,IAAI;EACpB,IAAI;GACF,OAAO,MAAM,KAAK,QAAQ,OAAO,YAAY;IAC3C,IAAI,KAAK,aAAa,KAAK,UAAU,OAAO,EAAE,YAAY,YAAY;IACtE,MAAM,QAA8B;KAAE,cAAc;KAAG,kBAAkB;KAAG,aAAa;IAAE;IAC3F,IAAI;IACJ,MAAM,aAAa,IAAI,SAA+C,YAAW;KAC/E,WAAW;IACb,CAAC;IACD,MAAM,QAAqB;KACzB,WAAW,QAAQ;KACnB;KACA,UAAS,WAAU;MACjB,MAAM,WAAW;MACjB,SAAS,MAAM;KACjB;IACF;IACA,MAAM,QAAQ;IACd,IAAI;KACF,MAAM,SAAS,MAAM,KAAK,gBAAgB,QAAQ,WAAW,KAAK;KAClE,MAAM,WAAW,MAAM,mBAAmB,SAAS,QAAQ,MAAM,YAAY,CAAC,CAAC;KAC/E,IAAI,KAAK,aAAa,KAAK,UAAU,OAAO,EAAE,YAAY,YAAY;KACtE,MAAM,MAAM,QAAQ,YAAY,EAAE,SAAS,SAAS,CAAC;KACrD,MAAM,SAAS,MAAM;KACrB,IAAI,WAAW,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,YACnD,MAAM,aAAa,cAAc,KAAA,GAAW,MAAM,OAAO,WAAW,yBAAyB;KAE/F,OAAO;MACL,YAAY,MAAM,YAAY,cAAe,MAAM,cAAc,cAAc,MAAM;MACrF,OAAO;OACL,aAAa,MAAM;OACnB,cAAc,MAAM;OACpB,aAAa,MAAM;OACnB,eAAe,MAAM;OACrB,kBAAkB,MAAM;OACxB,mBAAmB,MAAM;MAC3B;KACF;IACF,SAAS,OAAO;KACd,IAAI,MAAM,WAAW,OAAO,EAAE,YAAY,YAAY;KACtD,IAAI,iBAAiB,cAAc,MAAM;KACzC,MAAM,aAAa,cACjB,KAAA,GACA,iBAAiB,QAAQ,MAAM,UAAU,yBAC3C;IACF,UAAU;KACR,MAAM,WAAW;KACjB,IAAI,MAAM,UAAU,OAAO,MAAM,QAAQ;IAC3C;GACF,CAAC;EACH,UAAU;GACR,MAAM,MAAM,OAAO,IAAI;EACzB;CACF;CAEA,MAAM,OAAO,cAAiD;EAC5D,MAAM,QAAQ,KAAK,SAAS,IAAI,aAAa,SAAS;EACtD,IAAI,CAAC,OAAO;EACZ,KAAK,MAAM,QAAQ,MAAM,OAAO,KAAK,YAAY;EACjD,IAAI,MAAM,SAAS,CAAC,MAAM,MAAM,YAAY,CAAC,MAAM,MAAM,WAAW;GAClE,MAAM,QAAQ,MAAM;GACpB,MAAM,YAAY;GAElB,KAAK,MAAM,QAAQ,MAAM,mBAAmB,OAAO,KAAK,CAAC,GACvD,IAAI;IACF,MAAM,KAAK;GACb,QAAQ,CAER;GAEF,MAAM,mBAAmB,MAAM;GAC/B,IAAI,MAAM,UAAU,OAAO;GAC3B,MAAM,QAAQ,MAAM;GAEpB,IAAI,MAAM,OAAO,WAAW;IAC1B,MAAM,QAAQ,OAAO,OAAO;IAC5B,MAAM,MAAM,QAAQ,SAAS;GAC/B;EACF;CACF;CAEA,MAAM,eAAe,QAA8D;EACjF,MAAM,QAAQ,KAAK,WAAW,OAAO,SAAS;EAC9C,IAAI,CAAC,MAAM,MAAM,MAAK,SAAQ,KAAK,OAAO,OAAO,MAAM,GACrD,MAAM,aAAa,cAAc,KAAA,GAAW,cAAc;EAC5D,MAAM,KAAK,QAAQ,OAAO,YAAY;GACpC,IAAI,KAAK,UAAU;GACnB,MAAM,MAAM,QAAQ,KAAK,OAAO,EAAE,QAAQ,OAAO,OAAO,CAAC;EAC3D,CAAC;CACH;CAEA,MAAM,yBAAyB,QAA+D;EAC5F,MAAM,QAAQ,KAAK,WAAW,OAAO,SAAS;EAC9C,MAAM,KAAK,QAAQ,OAAO,YAAY;GACpC,IAAI,KAAK,UAAU;GACnB,IACE,CAAC,oBAAoB,MAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,MAClE,UAAS,MAAM,YAAY,OAAO,OACpC,GAEA,MAAM,aAAa,cACjB,KAAA,GACA,iFACF;GAEF,MAAM,MAAM,QAAQ,MAAM,OAAO,EAAE,SAAS,OAAO,QAAQ,CAAC;EAC9D,CAAC;CACH;AACF;AAEA,SAAS,oBAAoB,QAAgC,gBAAgD;CAE3G,OAAO,kBAAkB,CAAC,OAAO,MAAK,UAAS,MAAM,YAAY,cAAc,IAC3E,CAAC;EAAE,SAAS;EAAgB,MAAM;CAAe,GAAG,GAAG,MAAM,IAC7D;AACN;AAEA,SAAgB,6BAA6B,QAAgC;CAC3E,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAClB,IAAI,MAAM,SAAS,QACjB,MAAM,KAAK,MAAM,IAAI;MAChB,IAAI,MAAM,SAAS,iBACxB,MAAM,KAAK,cAAc,MAAM,IAAI,EAAE;MAChC,IAAI,MAAM,SAAS,YAAY;EACpC,MAAM,KAAK,cAAc,MAAM,SAAS,IAAI,EAAE;EAC9C,IAAI,EAAE,UAAU,MAAM,WACpB,MAAM,aAAa,cAAc,KAAA,GAAW,2CAA2C;EACzF,MAAM,KAAK,MAAM,SAAS,IAAI;CAChC,OACE,MAAM,aAAa,cAAc,KAAA,GAAW,+BAA+B,MAAM,MAAM;CAG3F,OAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAgB,cACd,QAC2E;CAC3E,QAAQ,QAAR;EACE,KAAK,YACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,SACH,MAAM,aAAa,cAAc,KAAA,GAAW,yBAAyB;EACvE,KAAK,aACH,OAAO;CACX;AACF"}
+{"version":3,"file":"agent.js","names":[],"sources":["../../src/acp/agent.ts"],"sourcesContent":["import { isAbsolute } from 'node:path';\nimport { PROTOCOL_VERSION, RequestError } from '@agentclientprotocol/sdk';\nimport type {\n  Agent,\n  AgentSideConnection,\n  AuthenticateRequest,\n  AuthMethod,\n  InitializeRequest,\n  InitializeResponse,\n  NewSessionRequest,\n  NewSessionResponse,\n  PromptRequest,\n  PromptResponse,\n  CancelNotification,\n  ContentBlock,\n  SessionConfigOption,\n  SetSessionConfigOptionRequest,\n  SetSessionConfigOptionResponse,\n  AvailableCommand,\n} from '@agentclientprotocol/sdk';\nimport type { AgentController, AgentControllerMode, Session } from '@mastra/core/agent-controller';\nimport { AuthStorage, getOAuthProviders, PROVIDER_DEFAULT_MODELS } from '../auth/storage.js';\nimport { seedProviderOMDefault } from '../onboarding/om-settings.js';\nimport { getAvailableThinkingLevelsForModel, isThinkingLevelSetting } from '../thinking.js';\nimport type { ThinkingLevelSetting } from '../thinking.js';\nimport { openUrlInBrowser } from '../utils/open-url.js';\nimport { getCurrentVersion } from '../utils/update-check.js';\nimport { withCleanupFailure } from './errors.js';\nimport { handleAgentControllerEvent } from './event-mapper.js';\nimport type { PromptState } from './event-mapper.js';\nimport { expandSkillCommand, listSkillCommands } from './skills.js';\nimport type { AcpSkills } from './skills.js';\n\nexport interface AcpSessionRuntime {\n  controller: AgentController;\n  session: Session;\n  modes: AgentControllerMode[];\n  getThinkingLevel?: () => ThinkingLevelSetting;\n  getSkills?: () => Promise<AcpSkills | undefined>;\n  cleanup?: () => Promise<void>;\n}\n\nexport type AcpSessionFactory = (request: NewSessionRequest) => Promise<AcpSessionRuntime>;\n\ninterface SessionEntry extends AcpSessionRuntime {\n  models: { modelId: string; name: string }[];\n  state: PromptState | null;\n  queue: Promise<void>;\n  turns: Set<{ cancelled: boolean }>;\n  unsubscribe: () => void;\n  commands?: AvailableCommand[];\n}\n\nconst TERMINAL_LOGIN_METHOD_ID = 'mastracode-login';\nconst BROWSER_LOGIN_PROVIDER_IDS = ['openai-codex', 'kimi-for-coding', 'xai'];\nconst TERMINAL_LOGIN_PROVIDER_IDS = ['anthropic', 'github-copilot'];\n\nfunction terminalLogin(id: string, name: string, description: string, loginArgs: string[]): AuthMethod {\n  return {\n    id,\n    name,\n    description,\n    type: 'terminal',\n    args: loginArgs,\n    _meta: {\n      'terminal-auth': {\n        command: process.execPath,\n        args: [...process.argv.slice(1, 2), ...loginArgs],\n        label: name,\n      },\n    },\n  };\n}\n\nfunction listAuthMethods({ auth, _meta }: InitializeRequest['clientCapabilities'] = {}): AuthMethod[] {\n  const providers = getOAuthProviders();\n  const methods: AuthMethod[] = providers\n    .filter(provider => BROWSER_LOGIN_PROVIDER_IDS.includes(provider.id))\n    .map(provider => ({\n      id: provider.id,\n      name: `Log in with ${provider.name}`,\n      description: 'Opens your browser to sign in',\n    }));\n  if (!auth?.terminal && _meta?.['terminal-auth'] !== true) return methods;\n  return [\n    ...methods,\n    ...providers\n      .filter(provider => TERMINAL_LOGIN_PROVIDER_IDS.includes(provider.id))\n      .map(provider =>\n        terminalLogin(provider.id, `Log in with ${provider.name}`, 'Sign in from a terminal', [\n          'login',\n          '--provider',\n          provider.id,\n        ]),\n      ),\n    terminalLogin(\n      TERMINAL_LOGIN_METHOD_ID,\n      'Log in with Mastra Code',\n      'Sign in to another provider or add an API key from a terminal',\n      ['login'],\n    ),\n  ];\n}\n\nfunction hasUsableModel(available: { id: string; hasApiKey: boolean }[], currentModelId: string): boolean {\n  if (available.some(model => model.hasApiKey)) return true;\n  return currentModelId !== '' && !available.some(model => model.id === currentModelId);\n}\n\nfunction credentialedDefaultModel(\n  available: { id: string; hasApiKey: boolean }[],\n  currentModelId: string,\n): string | undefined {\n  const current = available.find(model => model.id === currentModelId);\n  if (!current || current.hasApiKey) return undefined;\n  const credentialed = new Set(available.filter(model => model.hasApiKey).map(model => model.id));\n  return Object.values(PROVIDER_DEFAULT_MODELS).find(modelId => credentialed.has(modelId));\n}\n\n/** One ACP connection, with an independent Mastra Code runtime for each conversation. */\nexport class MastraCodeAcpAgent implements Agent {\n  private readonly sessions = new Map<string, SessionEntry>();\n  private readonly pendingCreations = new Set<Promise<NewSessionResponse>>();\n  private readonly startupCleanupFailures: unknown[] = [];\n  private disposed = false;\n  private disposal?: Promise<void>;\n\n  constructor(\n    private readonly connection: AgentSideConnection,\n    private readonly createSession: AcpSessionFactory,\n  ) {}\n\n  private getSession(sessionId: string): SessionEntry {\n    const entry = this.sessions.get(sessionId);\n    if (!entry || this.disposed) throw RequestError.invalidParams({ sessionId }, 'Unknown ACP session');\n    return entry;\n  }\n\n  private enqueue<T>(entry: SessionEntry, operation: () => Promise<T>): Promise<T> {\n    const result = entry.queue.then(operation);\n    entry.queue = result.then(\n      () => {},\n      () => {},\n    );\n    return result;\n  }\n\n  dispose(): Promise<void> {\n    if (this.disposal) return this.disposal;\n    this.disposed = true;\n    const entries = [...this.sessions.values()];\n    this.sessions.clear();\n    const cleanup = Promise.allSettled([\n      // A runtime under construction owns its cleanup until it joins sessions.\n      Promise.allSettled([...this.pendingCreations]),\n      ...entries.map(async entry => {\n        for (const turn of entry.turns) turn.cancelled = true;\n        if (entry.state) {\n          entry.state.cancelled = true;\n          entry.session.abort();\n          entry.state?.resolve('aborted');\n        }\n        entry.unsubscribe();\n        await entry.cleanup?.();\n      }),\n    ]).then(results => {\n      const failures = results.filter(result => result.status === 'rejected').map(result => result.reason);\n      failures.push(...this.startupCleanupFailures);\n      if (failures.length) throw new AggregateError(failures, 'ACP session cleanup failed');\n    });\n    // A provider or MCP startup can stall. Keep its cleanup ownership, but let\n    // the host terminate the connection if shutdown cannot finish in time.\n    this.disposal = new Promise<void>((resolve, reject) => {\n      const timeout = setTimeout(() => reject(new Error('ACP shutdown timed out after 10 seconds')), 10_000);\n      void cleanup.then(resolve, reject).finally(() => clearTimeout(timeout));\n    });\n    return this.disposal;\n  }\n\n  async initialize({ clientCapabilities }: InitializeRequest): Promise<InitializeResponse> {\n    return {\n      protocolVersion: PROTOCOL_VERSION,\n      agentInfo: { name: 'mastracode', title: 'Mastra Code', version: getCurrentVersion() },\n      agentCapabilities: { loadSession: false, mcpCapabilities: { http: true, sse: false } },\n      authMethods: listAuthMethods(clientCapabilities),\n    };\n  }\n\n  async authenticate({ methodId }: AuthenticateRequest): Promise<void> {\n    if (methodId === TERMINAL_LOGIN_METHOD_ID || TERMINAL_LOGIN_PROVIDER_IDS.includes(methodId)) return;\n    if (!BROWSER_LOGIN_PROVIDER_IDS.includes(methodId)) {\n      throw RequestError.invalidParams(undefined, `Unknown authentication method: ${methodId}`);\n    }\n    const needsTerminal = () =>\n      RequestError.internalError(\n        undefined,\n        \"Browser sign-in can't finish on its own. Run `mastracode login` in a terminal to sign in.\",\n      );\n    await new AuthStorage().login(methodId, {\n      authMode: 'browser',\n      onAuth: ({ url, userCode }) => {\n        if (userCode && !url.includes(userCode)) throw needsTerminal();\n        process.stderr.write(`Open ${url} to sign in\\n`);\n        openUrlInBrowser(url);\n      },\n      onPrompt: async () => {\n        throw needsTerminal();\n      },\n    });\n    try {\n      seedProviderOMDefault(methodId);\n    } catch (error) {\n      process.stderr.write(`[acp] memory model unchanged after sign-in: ${error}\\n`);\n    }\n  }\n\n  newSession(request: NewSessionRequest): Promise<NewSessionResponse> {\n    const creating = Promise.resolve().then(() => this.createNewSession(request));\n    this.pendingCreations.add(creating);\n    void creating.then(\n      () => this.pendingCreations.delete(creating),\n      () => this.pendingCreations.delete(creating),\n    );\n    return creating;\n  }\n\n  private async createNewSession(request: NewSessionRequest): Promise<NewSessionResponse> {\n    if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n    if (!isAbsolute(request.cwd)) throw RequestError.invalidParams(undefined, 'cwd must be an absolute path');\n    const runtime = await this.createSession(request);\n    try {\n      if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n      const available = await runtime.controller.listAvailableModels();\n      if (!hasUsableModel(available, runtime.session.model.get() ?? '')) {\n        throw RequestError.authRequired(undefined, 'Sign in to a model provider or add an API key to use Mastra Code');\n      }\n      const thread = await runtime.session.thread.create();\n      await runtime.session.thread.switch({ threadId: thread.id });\n      const defaultModelId = credentialedDefaultModel(available, runtime.session.model.get() ?? '');\n      if (defaultModelId) await runtime.session.model.switch({ modelId: defaultModelId });\n      const models: NewSessionResponse['models'] = {\n        currentModelId: runtime.session.model.get() ?? '',\n        availableModels: includeCurrentModel(\n          [\n            ...new Map(\n              available\n                .filter(model => model.hasApiKey || model.id === runtime.session.model.get())\n                .map(\n                  model =>\n                    [\n                      model.id,\n                      {\n                        modelId: model.id,\n                        name: model.hasApiKey ? model.id : `${model.id} (provider not configured)`,\n                      },\n                    ] as const,\n                ),\n            ).values(),\n          ],\n          runtime.session.model.get() ?? '',\n        ),\n      };\n      if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n      const entry: SessionEntry = {\n        ...runtime,\n        models: models.availableModels,\n        state: null,\n        queue: Promise.resolve(),\n        turns: new Set(),\n        unsubscribe: () => {},\n        commands: [],\n      };\n      if (this.disposed) throw RequestError.internalError(undefined, 'ACP connection is closed');\n      entry.unsubscribe = runtime.session.subscribe(event => {\n        handleAgentControllerEvent(event, entry.state, this.connection, entry.session);\n        if (event.type === 'mode_changed') {\n          void this.connection\n            .sessionUpdate({\n              sessionId: thread.id,\n              update: { sessionUpdate: 'current_mode_update', currentModeId: entry.session.mode.get() },\n            })\n            .catch(error => process.stderr.write(`[acp] mode update failed: ${error}\\n`));\n        }\n        if (\n          event.type === 'mode_changed' ||\n          event.type === 'model_changed' ||\n          (event.type === 'state_changed' && event.changedKeys.includes('thinkingLevel'))\n        ) {\n          void this.connection\n            .sessionUpdate({\n              sessionId: thread.id,\n              update: { sessionUpdate: 'config_option_update', configOptions: this.configOptions(entry) },\n            })\n            .catch(error => process.stderr.write(`[acp] configuration update failed: ${error}\\n`));\n        }\n      });\n      const response: NewSessionResponse = {\n        sessionId: thread.id,\n        modes: {\n          currentModeId: runtime.session.mode.get(),\n          availableModes: runtime.modes.map(mode => ({ id: mode.id, name: mode.name ?? mode.id })),\n        },\n        models,\n        configOptions: this.configOptions(entry),\n      };\n      this.sessions.set(thread.id, entry);\n      // Let the SDK send session/new before clients receive updates for this ID.\n      setImmediate(() => {\n        void this.enqueue(entry, async () => {\n          if (!this.disposed) await this.refreshCommands(thread.id, entry);\n        }).catch(error => process.stderr.write(`[acp] command discovery failed: ${error}\\n`));\n      });\n      return response;\n    } catch (error) {\n      try {\n        await runtime.cleanup?.();\n      } catch (cleanupError) {\n        if (this.disposed) this.startupCleanupFailures.push(cleanupError);\n        throw withCleanupFailure(error, cleanupError);\n      }\n      throw error;\n    }\n  }\n\n  private async refreshCommands(sessionId: string, entry: SessionEntry): Promise<AcpSkills | undefined> {\n    const skills = await entry.getSkills?.();\n    const commands = await listSkillCommands(skills);\n    if (JSON.stringify(commands) !== JSON.stringify(entry.commands)) {\n      await this.connection.sessionUpdate({\n        sessionId,\n        update: { sessionUpdate: 'available_commands_update', availableCommands: commands },\n      });\n      entry.commands = commands;\n    }\n    return skills;\n  }\n\n  private configOptions(entry: SessionEntry): SessionConfigOption[] {\n    const modelId = entry.session.model.get() ?? '';\n    const options: SessionConfigOption[] = [];\n    const models = includeCurrentModel(entry.models, modelId);\n    if (models.length)\n      options.push({\n        id: 'model',\n        name: 'Model',\n        category: 'model',\n        type: 'select',\n        currentValue: modelId,\n        options: models.map(model => ({ value: model.modelId, name: model.name })),\n      });\n    options.push({\n      id: 'mode',\n      name: 'Mode',\n      category: 'mode',\n      type: 'select',\n      currentValue: entry.session.mode.get(),\n      options: entry.modes.map(mode => ({ value: mode.id, name: mode.name ?? mode.id })),\n    });\n    if (entry.getThinkingLevel)\n      options.push({\n        id: 'thought_level',\n        name: 'Reasoning effort',\n        category: 'thought_level',\n        type: 'select',\n        description: 'Requested reasoning level. The provider may adjust it for the selected model.',\n        currentValue: this.thinkingLevel(entry),\n        options: getAvailableThinkingLevelsForModel(modelId).map(value => ({\n          value,\n          name: value[0]!.toUpperCase() + value.slice(1),\n        })),\n      });\n    return options;\n  }\n\n  private thinkingLevel(entry: SessionEntry): ThinkingLevelSetting {\n    const level = entry.getThinkingLevel?.() ?? 'off';\n    const levels = getAvailableThinkingLevelsForModel(entry.session.model.get() ?? '');\n    return levels.includes(level) ? level : 'xhigh';\n  }\n\n  async setSessionConfigOption(params: SetSessionConfigOptionRequest): Promise<SetSessionConfigOptionResponse> {\n    const entry = this.getSession(params.sessionId);\n    return this.enqueue(entry, async () => {\n      this.getSession(params.sessionId);\n      const option = this.configOptions(entry).find(option => option.id === params.configId);\n      if (\n        !option ||\n        option.type !== 'select' ||\n        !option.options.some(item => 'value' in item && item.value === params.value)\n      ) {\n        throw RequestError.invalidParams(undefined, 'Unknown session configuration selection');\n      }\n      if (params.configId === 'model') {\n        await entry.session.model.switch({ modelId: String(params.value) });\n      } else if (params.configId === 'mode') {\n        await entry.session.mode.switch({ modeId: String(params.value) });\n      } else if (isThinkingLevelSetting(params.value)) {\n        await entry.session.state.set({ thinkingLevel: params.value });\n      }\n      if (entry.getThinkingLevel && entry.getThinkingLevel() !== this.thinkingLevel(entry)) {\n        await entry.session.state.set({ thinkingLevel: this.thinkingLevel(entry) });\n      }\n      return { configOptions: this.configOptions(entry) };\n    });\n  }\n\n  async prompt(request: PromptRequest): Promise<PromptResponse> {\n    const entry = this.getSession(request.sessionId);\n    const content = extractTextFromContentBlocks(request.prompt);\n    const turn = { cancelled: false };\n    entry.turns.add(turn);\n    try {\n      return await this.enqueue(entry, async () => {\n        if (turn.cancelled || this.disposed) return { stopReason: 'cancelled' };\n        const usage: PromptState['usage'] = { promptTokens: 0, completionTokens: 0, totalTokens: 0 };\n        let complete!: PromptState['resolve'];\n        const completion = new Promise<Parameters<PromptState['resolve']>[0]>(resolve => {\n          complete = resolve;\n        });\n        const state: PromptState = {\n          sessionId: request.sessionId,\n          usage,\n          resolve: reason => {\n            state.finished = true;\n            complete(reason);\n          },\n        };\n        entry.state = state;\n        try {\n          const skills = await this.refreshCommands(request.sessionId, entry);\n          const expanded = await expandSkillCommand(content, skills, entry.commands ?? []);\n          if (turn.cancelled || this.disposed) return { stopReason: 'cancelled' };\n          await entry.session.sendMessage({ content: expanded });\n          const reason = await completion;\n          if (reason === 'error' && !state.cancelled && !state.stopReason) {\n            throw RequestError.internalError(undefined, state.error?.message ?? 'Mastra Code turn failed');\n          }\n          return {\n            stopReason: state.cancelled ? 'cancelled' : (state.stopReason ?? mapStopReason(reason)),\n            usage: {\n              inputTokens: usage.promptTokens,\n              outputTokens: usage.completionTokens,\n              totalTokens: usage.totalTokens,\n              thoughtTokens: usage.reasoningTokens,\n              cachedReadTokens: usage.cachedInputTokens,\n              cachedWriteTokens: usage.cacheCreationInputTokens,\n            },\n          };\n        } catch (error) {\n          if (state.cancelled) return { stopReason: 'cancelled' };\n          if (error instanceof RequestError) throw error;\n          throw RequestError.internalError(\n            undefined,\n            error instanceof Error ? error.message : 'Mastra Code turn failed',\n          );\n        } finally {\n          state.finished = true;\n          if (entry.state === state) entry.state = null;\n        }\n      });\n    } finally {\n      entry.turns.delete(turn);\n    }\n  }\n\n  async cancel(notification: CancelNotification): Promise<void> {\n    const entry = this.sessions.get(notification.sessionId);\n    if (!entry) return;\n    for (const turn of entry.turns) turn.cancelled = true;\n    if (entry.state && !entry.state.finished && !entry.state.cancelled) {\n      const state = entry.state;\n      state.cancelled = true;\n      // Persist denial before aborting, otherwise a parked snapshot can replay on the next turn.\n      for (const deny of state.cancelSuspensions?.values() ?? []) {\n        try {\n          await deny();\n        } catch {\n          /* Still abort if the suspended run is no longer available. */\n        }\n      }\n      state.cancelSuspensions?.clear();\n      if (entry.state !== state) return;\n      entry.session.abort();\n      // A suspended run has already ended and will not emit another agent_end.\n      if (entry.state?.suspended) {\n        entry.session.stream.detach();\n        entry.state.resolve('aborted');\n      }\n    }\n  }\n\n  async setSessionMode(params: { sessionId: string; modeId: string }): Promise<void> {\n    const entry = this.getSession(params.sessionId);\n    if (!entry.modes.some(mode => mode.id === params.modeId))\n      throw RequestError.invalidParams(undefined, 'Unknown mode');\n    await this.enqueue(entry, async () => {\n      if (this.disposed) return;\n      await entry.session.mode.switch({ modeId: params.modeId });\n    });\n  }\n\n  async unstable_setSessionModel(params: { sessionId: string; modelId: string }): Promise<void> {\n    const entry = this.getSession(params.sessionId);\n    await this.enqueue(entry, async () => {\n      if (this.disposed) return;\n      if (\n        !includeCurrentModel(entry.models, entry.session.model.get() ?? '').some(\n          model => model.modelId === params.modelId,\n        )\n      ) {\n        throw RequestError.invalidParams(\n          undefined,\n          'Model is unavailable or its provider is not configured. Refresh the model list.',\n        );\n      }\n      await entry.session.model.switch({ modelId: params.modelId });\n    });\n  }\n}\n\nfunction includeCurrentModel(models: SessionEntry['models'], currentModelId: string): SessionEntry['models'] {\n  // Saved/custom model IDs may work even when discovery only returns a gateway-qualified alias.\n  return currentModelId && !models.some(model => model.modelId === currentModelId)\n    ? [{ modelId: currentModelId, name: currentModelId }, ...models]\n    : models;\n}\n\nexport function extractTextFromContentBlocks(blocks: ContentBlock[]): string {\n  const parts: string[] = [];\n  for (const block of blocks) {\n    if (block.type === 'text') {\n      parts.push(block.text);\n    } else if (block.type === 'resource_link') {\n      parts.push(`[resource: ${block.uri}]`);\n    } else if (block.type === 'resource') {\n      parts.push(`[resource: ${block.resource.uri}]`);\n      if (!('text' in block.resource))\n        throw RequestError.invalidParams(undefined, 'Binary prompt resources are not supported');\n      parts.push(block.resource.text);\n    } else {\n      throw RequestError.invalidParams(undefined, `Unsupported prompt content: ${block.type}`);\n    }\n  }\n  return parts.join('\\n');\n}\n\nexport function mapStopReason(\n  reason: 'complete' | 'aborted' | 'error' | 'suspended',\n): 'end_turn' | 'cancelled' | 'max_tokens' | 'max_turn_requests' | 'refusal' {\n  switch (reason) {\n    case 'complete':\n      return 'end_turn';\n    case 'aborted':\n      return 'cancelled';\n    case 'error':\n      throw RequestError.internalError(undefined, 'Mastra Code turn failed');\n    case 'suspended':\n      return 'end_turn';\n  }\n}\n"],"mappings":";;;;;;;;;;;AAqDA,MAAM,2BAA2B;AACjC,MAAM,6BAA6B;CAAC;CAAgB;CAAmB;AAAK;AAC5E,MAAM,8BAA8B,CAAC,aAAa,gBAAgB;AAElE,SAAS,cAAc,IAAY,MAAc,aAAqB,WAAiC;CACrG,OAAO;EACL;EACA;EACA;EACA,MAAM;EACN,MAAM;EACN,OAAO,EACL,iBAAiB;GACf,SAAS,QAAQ;GACjB,MAAM,CAAC,GAAG,QAAQ,KAAK,MAAM,GAAG,CAAC,GAAG,GAAG,SAAS;GAChD,OAAO;EACT,EACF;CACF;AACF;AAEA,SAAS,gBAAgB,EAAE,MAAM,UAAmD,CAAC,GAAiB;CACpG,MAAM,YAAY,kBAAkB;CACpC,MAAM,UAAwB,UAC3B,QAAO,aAAY,2BAA2B,SAAS,SAAS,EAAE,CAAC,CAAC,CACpE,KAAI,cAAa;EAChB,IAAI,SAAS;EACb,MAAM,eAAe,SAAS;EAC9B,aAAa;CACf,EAAE;CACJ,IAAI,CAAC,MAAM,YAAY,QAAQ,qBAAqB,MAAM,OAAO;CACjE,OAAO;EACL,GAAG;EACH,GAAG,UACA,QAAO,aAAY,4BAA4B,SAAS,SAAS,EAAE,CAAC,CAAC,CACrE,KAAI,aACH,cAAc,SAAS,IAAI,eAAe,SAAS,QAAQ,2BAA2B;GACpF;GACA;GACA,SAAS;EACX,CAAC,CACH;EACF,cACE,0BACA,2BACA,iEACA,CAAC,OAAO,CACV;CACF;AACF;AAEA,SAAS,eAAe,WAAiD,gBAAiC;CACxG,IAAI,UAAU,MAAK,UAAS,MAAM,SAAS,GAAG,OAAO;CACrD,OAAO,mBAAmB,MAAM,CAAC,UAAU,MAAK,UAAS,MAAM,OAAO,cAAc;AACtF;AAEA,SAAS,yBACP,WACA,gBACoB;CACpB,MAAM,UAAU,UAAU,MAAK,UAAS,MAAM,OAAO,cAAc;CACnE,IAAI,CAAC,WAAW,QAAQ,WAAW,OAAO,KAAA;CAC1C,MAAM,eAAe,IAAI,IAAI,UAAU,QAAO,UAAS,MAAM,SAAS,CAAC,CAAC,KAAI,UAAS,MAAM,EAAE,CAAC;CAC9F,OAAO,OAAO,OAAO,uBAAuB,CAAC,CAAC,MAAK,YAAW,aAAa,IAAI,OAAO,CAAC;AACzF;;AAGA,IAAa,qBAAb,MAAiD;CAQ5B;CACA;CARnB,2BAA4B,IAAI,IAA0B;CAC1D,mCAAoC,IAAI,IAAiC;CACzE,yBAAqD,CAAC;CACtD,WAAmB;CACnB;CAEA,YACE,YACA,eACA;EAFiB,KAAA,aAAA;EACA,KAAA,gBAAA;CAChB;CAEH,WAAmB,WAAiC;EAClD,MAAM,QAAQ,KAAK,SAAS,IAAI,SAAS;EACzC,IAAI,CAAC,SAAS,KAAK,UAAU,MAAM,aAAa,cAAc,EAAE,UAAU,GAAG,qBAAqB;EAClG,OAAO;CACT;CAEA,QAAmB,OAAqB,WAAyC;EAC/E,MAAM,SAAS,MAAM,MAAM,KAAK,SAAS;EACzC,MAAM,QAAQ,OAAO,WACb,CAAC,SACD,CAAC,CACT;EACA,OAAO;CACT;CAEA,UAAyB;EACvB,IAAI,KAAK,UAAU,OAAO,KAAK;EAC/B,KAAK,WAAW;EAChB,MAAM,UAAU,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC;EAC1C,KAAK,SAAS,MAAM;EACpB,MAAM,UAAU,QAAQ,WAAW,CAEjC,QAAQ,WAAW,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAC7C,GAAG,QAAQ,IAAI,OAAM,UAAS;GAC5B,KAAK,MAAM,QAAQ,MAAM,OAAO,KAAK,YAAY;GACjD,IAAI,MAAM,OAAO;IACf,MAAM,MAAM,YAAY;IACxB,MAAM,QAAQ,MAAM;IACpB,MAAM,OAAO,QAAQ,SAAS;GAChC;GACA,MAAM,YAAY;GAClB,MAAM,MAAM,UAAU;EACxB,CAAC,CACH,CAAC,CAAC,CAAC,MAAK,YAAW;GACjB,MAAM,WAAW,QAAQ,QAAO,WAAU,OAAO,WAAW,UAAU,CAAC,CAAC,KAAI,WAAU,OAAO,MAAM;GACnG,SAAS,KAAK,GAAG,KAAK,sBAAsB;GAC5C,IAAI,SAAS,QAAQ,MAAM,IAAI,eAAe,UAAU,4BAA4B;EACtF,CAAC;EAGD,KAAK,WAAW,IAAI,SAAe,SAAS,WAAW;GACrD,MAAM,UAAU,iBAAiB,uBAAO,IAAI,MAAM,yCAAyC,CAAC,GAAG,GAAM;GACrG,QAAa,KAAK,SAAS,MAAM,CAAC,CAAC,cAAc,aAAa,OAAO,CAAC;EACxE,CAAC;EACD,OAAO,KAAK;CACd;CAEA,MAAM,WAAW,EAAE,sBAAsE;EACvF,OAAO;GACL,iBAAiB;GACjB,WAAW;IAAE,MAAM;IAAc,OAAO;IAAe,SAAS,kBAAkB;GAAE;GACpF,mBAAmB;IAAE,aAAa;IAAO,iBAAiB;KAAE,MAAM;KAAM,KAAK;IAAM;GAAE;GACrF,aAAa,gBAAgB,kBAAkB;EACjD;CACF;CAEA,MAAM,aAAa,EAAE,YAAgD;EACnE,IAAI,aAAa,4BAA4B,4BAA4B,SAAS,QAAQ,GAAG;EAC7F,IAAI,CAAC,2BAA2B,SAAS,QAAQ,GAC/C,MAAM,aAAa,cAAc,KAAA,GAAW,kCAAkC,UAAU;EAE1F,MAAM,sBACJ,aAAa,cACX,KAAA,GACA,2FACF;EACF,MAAM,IAAI,YAAY,CAAC,CAAC,MAAM,UAAU;GACtC,UAAU;GACV,SAAS,EAAE,KAAK,eAAe;IAC7B,IAAI,YAAY,CAAC,IAAI,SAAS,QAAQ,GAAG,MAAM,cAAc;IAC7D,QAAQ,OAAO,MAAM,QAAQ,IAAI,cAAc;IAC/C,iBAAiB,GAAG;GACtB;GACA,UAAU,YAAY;IACpB,MAAM,cAAc;GACtB;EACF,CAAC;EACD,IAAI;GACF,sBAAsB,QAAQ;EAChC,SAAS,OAAO;GACd,QAAQ,OAAO,MAAM,+CAA+C,MAAM,GAAG;EAC/E;CACF;CAEA,WAAW,SAAyD;EAClE,MAAM,WAAW,QAAQ,QAAQ,CAAC,CAAC,WAAW,KAAK,iBAAiB,OAAO,CAAC;EAC5E,KAAK,iBAAiB,IAAI,QAAQ;EAClC,SAAc,WACN,KAAK,iBAAiB,OAAO,QAAQ,SACrC,KAAK,iBAAiB,OAAO,QAAQ,CAC7C;EACA,OAAO;CACT;CAEA,MAAc,iBAAiB,SAAyD;EACtF,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;EACzF,IAAI,CAAC,WAAW,QAAQ,GAAG,GAAG,MAAM,aAAa,cAAc,KAAA,GAAW,8BAA8B;EACxG,MAAM,UAAU,MAAM,KAAK,cAAc,OAAO;EAChD,IAAI;GACF,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;GACzF,MAAM,YAAY,MAAM,QAAQ,WAAW,oBAAoB;GAC/D,IAAI,CAAC,eAAe,WAAW,QAAQ,QAAQ,MAAM,IAAI,KAAK,EAAE,GAC9D,MAAM,aAAa,aAAa,KAAA,GAAW,kEAAkE;GAE/G,MAAM,SAAS,MAAM,QAAQ,QAAQ,OAAO,OAAO;GACnD,MAAM,QAAQ,QAAQ,OAAO,OAAO,EAAE,UAAU,OAAO,GAAG,CAAC;GAC3D,MAAM,iBAAiB,yBAAyB,WAAW,QAAQ,QAAQ,MAAM,IAAI,KAAK,EAAE;GAC5F,IAAI,gBAAgB,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE,SAAS,eAAe,CAAC;GAClF,MAAM,SAAuC;IAC3C,gBAAgB,QAAQ,QAAQ,MAAM,IAAI,KAAK;IAC/C,iBAAiB,oBACf,CACE,GAAG,IAAI,IACL,UACG,QAAO,UAAS,MAAM,aAAa,MAAM,OAAO,QAAQ,QAAQ,MAAM,IAAI,CAAC,CAAC,CAC5E,KACC,UACE,CACE,MAAM,IACN;KACE,SAAS,MAAM;KACf,MAAM,MAAM,YAAY,MAAM,KAAK,GAAG,MAAM,GAAG;IACjD,CACF,CACJ,CACJ,CAAC,CAAC,OAAO,CACX,GACA,QAAQ,QAAQ,MAAM,IAAI,KAAK,EACjC;GACF;GACA,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;GACzF,MAAM,QAAsB;IAC1B,GAAG;IACH,QAAQ,OAAO;IACf,OAAO;IACP,OAAO,QAAQ,QAAQ;IACvB,uBAAO,IAAI,IAAI;IACf,mBAAmB,CAAC;IACpB,UAAU,CAAC;GACb;GACA,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,KAAA,GAAW,0BAA0B;GACzF,MAAM,cAAc,QAAQ,QAAQ,WAAU,UAAS;IACrD,2BAA2B,OAAO,MAAM,OAAO,KAAK,YAAY,MAAM,OAAO;IAC7E,IAAI,MAAM,SAAS,gBACjB,KAAU,WACP,cAAc;KACb,WAAW,OAAO;KAClB,QAAQ;MAAE,eAAe;MAAuB,eAAe,MAAM,QAAQ,KAAK,IAAI;KAAE;IAC1F,CAAC,CAAC,CACD,OAAM,UAAS,QAAQ,OAAO,MAAM,6BAA6B,MAAM,GAAG,CAAC;IAEhF,IACE,MAAM,SAAS,kBACf,MAAM,SAAS,mBACd,MAAM,SAAS,mBAAmB,MAAM,YAAY,SAAS,eAAe,GAE7E,KAAU,WACP,cAAc;KACb,WAAW,OAAO;KAClB,QAAQ;MAAE,eAAe;MAAwB,eAAe,KAAK,cAAc,KAAK;KAAE;IAC5F,CAAC,CAAC,CACD,OAAM,UAAS,QAAQ,OAAO,MAAM,sCAAsC,MAAM,GAAG,CAAC;GAE3F,CAAC;GACD,MAAM,WAA+B;IACnC,WAAW,OAAO;IAClB,OAAO;KACL,eAAe,QAAQ,QAAQ,KAAK,IAAI;KACxC,gBAAgB,QAAQ,MAAM,KAAI,UAAS;MAAE,IAAI,KAAK;MAAI,MAAM,KAAK,QAAQ,KAAK;KAAG,EAAE;IACzF;IACA;IACA,eAAe,KAAK,cAAc,KAAK;GACzC;GACA,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK;GAElC,mBAAmB;IACjB,KAAU,QAAQ,OAAO,YAAY;KACnC,IAAI,CAAC,KAAK,UAAU,MAAM,KAAK,gBAAgB,OAAO,IAAI,KAAK;IACjE,CAAC,CAAC,CAAC,OAAM,UAAS,QAAQ,OAAO,MAAM,mCAAmC,MAAM,GAAG,CAAC;GACtF,CAAC;GACD,OAAO;EACT,SAAS,OAAO;GACd,IAAI;IACF,MAAM,QAAQ,UAAU;GAC1B,SAAS,cAAc;IACrB,IAAI,KAAK,UAAU,KAAK,uBAAuB,KAAK,YAAY;IAChE,MAAM,mBAAmB,OAAO,YAAY;GAC9C;GACA,MAAM;EACR;CACF;CAEA,MAAc,gBAAgB,WAAmB,OAAqD;EACpG,MAAM,SAAS,MAAM,MAAM,YAAY;EACvC,MAAM,WAAW,MAAM,kBAAkB,MAAM;EAC/C,IAAI,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,MAAM,QAAQ,GAAG;GAC/D,MAAM,KAAK,WAAW,cAAc;IAClC;IACA,QAAQ;KAAE,eAAe;KAA6B,mBAAmB;IAAS;GACpF,CAAC;GACD,MAAM,WAAW;EACnB;EACA,OAAO;CACT;CAEA,cAAsB,OAA4C;EAChE,MAAM,UAAU,MAAM,QAAQ,MAAM,IAAI,KAAK;EAC7C,MAAM,UAAiC,CAAC;EACxC,MAAM,SAAS,oBAAoB,MAAM,QAAQ,OAAO;EACxD,IAAI,OAAO,QACT,QAAQ,KAAK;GACX,IAAI;GACJ,MAAM;GACN,UAAU;GACV,MAAM;GACN,cAAc;GACd,SAAS,OAAO,KAAI,WAAU;IAAE,OAAO,MAAM;IAAS,MAAM,MAAM;GAAK,EAAE;EAC3E,CAAC;EACH,QAAQ,KAAK;GACX,IAAI;GACJ,MAAM;GACN,UAAU;GACV,MAAM;GACN,cAAc,MAAM,QAAQ,KAAK,IAAI;GACrC,SAAS,MAAM,MAAM,KAAI,UAAS;IAAE,OAAO,KAAK;IAAI,MAAM,KAAK,QAAQ,KAAK;GAAG,EAAE;EACnF,CAAC;EACD,IAAI,MAAM,kBACR,QAAQ,KAAK;GACX,IAAI;GACJ,MAAM;GACN,UAAU;GACV,MAAM;GACN,aAAa;GACb,cAAc,KAAK,cAAc,KAAK;GACtC,SAAS,mCAAmC,OAAO,CAAC,CAAC,KAAI,WAAU;IACjE;IACA,MAAM,MAAM,EAAE,CAAE,YAAY,IAAI,MAAM,MAAM,CAAC;GAC/C,EAAE;EACJ,CAAC;EACH,OAAO;CACT;CAEA,cAAsB,OAA2C;EAC/D,MAAM,QAAQ,MAAM,mBAAmB,KAAK;EAE5C,OADe,mCAAmC,MAAM,QAAQ,MAAM,IAAI,KAAK,EACnE,CAAC,CAAC,SAAS,KAAK,IAAI,QAAQ;CAC1C;CAEA,MAAM,uBAAuB,QAAgF;EAC3G,MAAM,QAAQ,KAAK,WAAW,OAAO,SAAS;EAC9C,OAAO,KAAK,QAAQ,OAAO,YAAY;GACrC,KAAK,WAAW,OAAO,SAAS;GAChC,MAAM,SAAS,KAAK,cAAc,KAAK,CAAC,CAAC,MAAK,WAAU,OAAO,OAAO,OAAO,QAAQ;GACrF,IACE,CAAC,UACD,OAAO,SAAS,YAChB,CAAC,OAAO,QAAQ,MAAK,SAAQ,WAAW,QAAQ,KAAK,UAAU,OAAO,KAAK,GAE3E,MAAM,aAAa,cAAc,KAAA,GAAW,yCAAyC;GAEvF,IAAI,OAAO,aAAa,SACtB,MAAM,MAAM,QAAQ,MAAM,OAAO,EAAE,SAAS,OAAO,OAAO,KAAK,EAAE,CAAC;QAC7D,IAAI,OAAO,aAAa,QAC7B,MAAM,MAAM,QAAQ,KAAK,OAAO,EAAE,QAAQ,OAAO,OAAO,KAAK,EAAE,CAAC;QAC3D,IAAI,uBAAuB,OAAO,KAAK,GAC5C,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,eAAe,OAAO,MAAM,CAAC;GAE/D,IAAI,MAAM,oBAAoB,MAAM,iBAAiB,MAAM,KAAK,cAAc,KAAK,GACjF,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,eAAe,KAAK,cAAc,KAAK,EAAE,CAAC;GAE5E,OAAO,EAAE,eAAe,KAAK,cAAc,KAAK,EAAE;EACpD,CAAC;CACH;CAEA,MAAM,OAAO,SAAiD;EAC5D,MAAM,QAAQ,KAAK,WAAW,QAAQ,SAAS;EAC/C,MAAM,UAAU,6BAA6B,QAAQ,MAAM;EAC3D,MAAM,OAAO,EAAE,WAAW,MAAM;EAChC,MAAM,MAAM,IAAI,IAAI;EACpB,IAAI;GACF,OAAO,MAAM,KAAK,QAAQ,OAAO,YAAY;IAC3C,IAAI,KAAK,aAAa,KAAK,UAAU,OAAO,EAAE,YAAY,YAAY;IACtE,MAAM,QAA8B;KAAE,cAAc;KAAG,kBAAkB;KAAG,aAAa;IAAE;IAC3F,IAAI;IACJ,MAAM,aAAa,IAAI,SAA+C,YAAW;KAC/E,WAAW;IACb,CAAC;IACD,MAAM,QAAqB;KACzB,WAAW,QAAQ;KACnB;KACA,UAAS,WAAU;MACjB,MAAM,WAAW;MACjB,SAAS,MAAM;KACjB;IACF;IACA,MAAM,QAAQ;IACd,IAAI;KACF,MAAM,SAAS,MAAM,KAAK,gBAAgB,QAAQ,WAAW,KAAK;KAClE,MAAM,WAAW,MAAM,mBAAmB,SAAS,QAAQ,MAAM,YAAY,CAAC,CAAC;KAC/E,IAAI,KAAK,aAAa,KAAK,UAAU,OAAO,EAAE,YAAY,YAAY;KACtE,MAAM,MAAM,QAAQ,YAAY,EAAE,SAAS,SAAS,CAAC;KACrD,MAAM,SAAS,MAAM;KACrB,IAAI,WAAW,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,YACnD,MAAM,aAAa,cAAc,KAAA,GAAW,MAAM,OAAO,WAAW,yBAAyB;KAE/F,OAAO;MACL,YAAY,MAAM,YAAY,cAAe,MAAM,cAAc,cAAc,MAAM;MACrF,OAAO;OACL,aAAa,MAAM;OACnB,cAAc,MAAM;OACpB,aAAa,MAAM;OACnB,eAAe,MAAM;OACrB,kBAAkB,MAAM;OACxB,mBAAmB,MAAM;MAC3B;KACF;IACF,SAAS,OAAO;KACd,IAAI,MAAM,WAAW,OAAO,EAAE,YAAY,YAAY;KACtD,IAAI,iBAAiB,cAAc,MAAM;KACzC,MAAM,aAAa,cACjB,KAAA,GACA,iBAAiB,QAAQ,MAAM,UAAU,yBAC3C;IACF,UAAU;KACR,MAAM,WAAW;KACjB,IAAI,MAAM,UAAU,OAAO,MAAM,QAAQ;IAC3C;GACF,CAAC;EACH,UAAU;GACR,MAAM,MAAM,OAAO,IAAI;EACzB;CACF;CAEA,MAAM,OAAO,cAAiD;EAC5D,MAAM,QAAQ,KAAK,SAAS,IAAI,aAAa,SAAS;EACtD,IAAI,CAAC,OAAO;EACZ,KAAK,MAAM,QAAQ,MAAM,OAAO,KAAK,YAAY;EACjD,IAAI,MAAM,SAAS,CAAC,MAAM,MAAM,YAAY,CAAC,MAAM,MAAM,WAAW;GAClE,MAAM,QAAQ,MAAM;GACpB,MAAM,YAAY;GAElB,KAAK,MAAM,QAAQ,MAAM,mBAAmB,OAAO,KAAK,CAAC,GACvD,IAAI;IACF,MAAM,KAAK;GACb,QAAQ,CAER;GAEF,MAAM,mBAAmB,MAAM;GAC/B,IAAI,MAAM,UAAU,OAAO;GAC3B,MAAM,QAAQ,MAAM;GAEpB,IAAI,MAAM,OAAO,WAAW;IAC1B,MAAM,QAAQ,OAAO,OAAO;IAC5B,MAAM,MAAM,QAAQ,SAAS;GAC/B;EACF;CACF;CAEA,MAAM,eAAe,QAA8D;EACjF,MAAM,QAAQ,KAAK,WAAW,OAAO,SAAS;EAC9C,IAAI,CAAC,MAAM,MAAM,MAAK,SAAQ,KAAK,OAAO,OAAO,MAAM,GACrD,MAAM,aAAa,cAAc,KAAA,GAAW,cAAc;EAC5D,MAAM,KAAK,QAAQ,OAAO,YAAY;GACpC,IAAI,KAAK,UAAU;GACnB,MAAM,MAAM,QAAQ,KAAK,OAAO,EAAE,QAAQ,OAAO,OAAO,CAAC;EAC3D,CAAC;CACH;CAEA,MAAM,yBAAyB,QAA+D;EAC5F,MAAM,QAAQ,KAAK,WAAW,OAAO,SAAS;EAC9C,MAAM,KAAK,QAAQ,OAAO,YAAY;GACpC,IAAI,KAAK,UAAU;GACnB,IACE,CAAC,oBAAoB,MAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,MAClE,UAAS,MAAM,YAAY,OAAO,OACpC,GAEA,MAAM,aAAa,cACjB,KAAA,GACA,iFACF;GAEF,MAAM,MAAM,QAAQ,MAAM,OAAO,EAAE,SAAS,OAAO,QAAQ,CAAC;EAC9D,CAAC;CACH;AACF;AAEA,SAAS,oBAAoB,QAAgC,gBAAgD;CAE3G,OAAO,kBAAkB,CAAC,OAAO,MAAK,UAAS,MAAM,YAAY,cAAc,IAC3E,CAAC;EAAE,SAAS;EAAgB,MAAM;CAAe,GAAG,GAAG,MAAM,IAC7D;AACN;AAEA,SAAgB,6BAA6B,QAAgC;CAC3E,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAClB,IAAI,MAAM,SAAS,QACjB,MAAM,KAAK,MAAM,IAAI;MAChB,IAAI,MAAM,SAAS,iBACxB,MAAM,KAAK,cAAc,MAAM,IAAI,EAAE;MAChC,IAAI,MAAM,SAAS,YAAY;EACpC,MAAM,KAAK,cAAc,MAAM,SAAS,IAAI,EAAE;EAC9C,IAAI,EAAE,UAAU,MAAM,WACpB,MAAM,aAAa,cAAc,KAAA,GAAW,2CAA2C;EACzF,MAAM,KAAK,MAAM,SAAS,IAAI;CAChC,OACE,MAAM,aAAa,cAAc,KAAA,GAAW,+BAA+B,MAAM,MAAM;CAG3F,OAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAgB,cACd,QAC2E;CAC3E,QAAQ,QAAR;EACE,KAAK,YACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,SACH,MAAM,aAAa,cAAc,KAAA,GAAW,yBAAyB;EACvE,KAAK,aACH,OAAO;CACX;AACF"}

package/dist/acp/runtime.js

@@ -1,5 +1,5 @@
-import { withCleanupFailure } from "./errors.js";
 import { loadSettings, resolveDefaultThinkingLevel } from "../onboarding/settings.js";
+import { withCleanupFailure } from "./errors.js";
 import { createMastraCode } from "../index.js";
 import { RequestError } from "@agentclientprotocol/sdk";
 //#region src/acp/runtime.ts

package/dist/agents/model.js

@@ -1,7 +1,7 @@
-import { isThinkingLevelSetting } from "../thinking.js";
+import { listBuiltinModePacks, resolveModePackFallbackChain } from "../onboarding/packs.js";
 import { MASTRA_GATEWAY_PREFIX, remapOpenAIModelForCodexOAuth, stripMastraGatewayPrefix } from "../providers/model-ids.js";
 import { ProviderAuthRequiredError } from "../auth/provider-auth-error.js";
-import { listBuiltinModePacks, resolveModePackFallbackChain } from "../onboarding/packs.js";
+import { isThinkingLevelSetting } from "../thinking.js";
 import { findModePackForModel, loadSettings, resolveDefaultThinkingLevel, resolveModePackModels, stripMastraCodeCustomProviderPrefix } from "../onboarding/settings.js";
 import { hasCredentialStoreProvider, resolveCredentialStore, resolveTenantFromRequestContext, setCredentialStoreProvider } from "./credential-resolver.js";
 import { getRequestAccountSelection, isRequestAccountRoutingExhausted } from "../auth/account-routing-context.js";

package/dist/agents/prompts/agent-instructions.js

@@ -1,7 +1,7 @@
 import { DEFAULT_CONFIG_DIR } from "../../constants.js";
 import { dirname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
-import { execFileSync } from "child_process";
 import { existsSync, readFileSync, realpathSync, statSync } from "fs";
+import { execFileSync } from "child_process";
 import { homedir } from "os";
 //#region src/agents/prompts/agent-instructions.ts
 /**

package/dist/auth/account-rotation-processor.js

@@ -1,6 +1,6 @@
 import { getOAuthProviders } from "./storage.js";
-import { ProviderAuthRequiredError } from "./provider-auth-error.js";
 import { resolveModePackFallbackChain } from "../onboarding/packs.js";
+import { ProviderAuthRequiredError } from "./provider-auth-error.js";
 import { findModePackForModel, loadSettings, resolveModePackModels } from "../onboarding/settings.js";
 import { resolveCredentialStore } from "../agents/credential-resolver.js";
 import { getRequestAccountSelection, isRequestAccountRoutingExhausted, markRequestAccountRoutingExhausted, setRequestAccountSelection } from "./account-routing-context.js";

package/dist/auth/providers/kimi-coding.js

@@ -170,7 +170,8 @@ async function loginKimiCoding(callbacks) {
 	const pending = await startKimiCodingDeviceLogin({ signal: callbacks.signal });
 	callbacks.onAuth({
 		url: pending.url,
-		instructions: pending.instructions
+		instructions: pending.instructions,
+		userCode: pending.userCode
 	});
 	callbacks.onProgress?.("Waiting for Kimi For Coding device authorization...");
 	return pollDeviceCodeUntilComplete({

package/dist/auth/providers/kimi-coding.js.map

@@ -1 +1 @@
-{"version":3,"file":"kimi-coding.js","names":[],"sources":["../../../src/auth/providers/kimi-coding.ts"],"sourcesContent":["import { arch, hostname, platform, release } from 'node:os';\nimport { getCurrentVersion } from '../../utils/update-check.js';\nimport {\n  abortableSleep,\n  createDeviceCodePollState,\n  pollDeviceCodeUntilComplete,\n  stepDeviceCodePoll,\n} from '../device-code.js';\nimport type { DeviceCodePollOutcome, DeviceCodePollState } from '../device-code.js';\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';\n\nconst CLIENT_ID = '17e5f671-d194-4dfb-9706-5516cb48c098';\nconst OAUTH_HOST = 'https://auth.kimi.com';\nconst DEVICE_ID_PATTERN = /^[0-9a-f]{32}$/;\nconst DEFAULT_EXPIRES_IN_SECONDS = 15 * 60;\nconst DEFAULT_POLL_INTERVAL_SECONDS = 5;\nconst REQUEST_TIMEOUT_MS = 30_000;\nconst REFRESH_MAX_RETRIES = 3;\n\nfunction asciiHeaderValue(value: string): string {\n  const sanitized = value.replace(/[^\\x20-\\x7E]/g, '').trim();\n  return sanitized || 'unknown';\n}\n\nconst KIMI_DEVICE_DETAILS = {\n  'X-Msh-Platform': 'mastracode',\n  'X-Msh-Version': asciiHeaderValue(getCurrentVersion()),\n  'X-Msh-Device-Name': asciiHeaderValue(hostname()),\n  'X-Msh-Device-Model': asciiHeaderValue(`${platform()} ${arch()}`),\n  'X-Msh-Os-Version': asciiHeaderValue(release()),\n};\n\nexport function createKimiCodingDeviceId(): string {\n  return globalThis.crypto.randomUUID().replaceAll('-', '');\n}\n\nexport function isKimiCodingDeviceId(value: unknown): value is string {\n  return typeof value === 'string' && DEVICE_ID_PATTERN.test(value);\n}\n\nexport function getKimiCodingDeviceHeaders(deviceId: string): Record<string, string> {\n  if (!isKimiCodingDeviceId(deviceId)) {\n    throw new Error('Kimi For Coding credentials have an invalid device ID. Please reconnect the account.');\n  }\n  return { ...KIMI_DEVICE_DETAILS, 'X-Msh-Device-Id': deviceId };\n}\n\nfunction requestSignal(signal?: AbortSignal): AbortSignal {\n  const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return signal ? AbortSignal.any([timeout, signal]) : timeout;\n}\n\nfunction trustedHttpUrl(value: unknown): string | null {\n  if (typeof value !== 'string' || !value) return null;\n  try {\n    const url = new URL(value);\n    return url.protocol === 'https:' ? url.href : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function readJson(response: Response): Promise<Record<string, unknown> | null> {\n  try {\n    const value = (await response.json()) as unknown;\n    return value && typeof value === 'object' ? (value as Record<string, unknown>) : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction credentialsFromTokenResponse(value: unknown, operation: string, deviceId: string): OAuthCredentials {\n  const data = (value ?? {}) as Record<string, unknown>;\n  const access = data.access_token;\n  const refresh = data.refresh_token;\n  const expiresIn = data.expires_in;\n  if (\n    typeof access !== 'string' ||\n    !access ||\n    typeof refresh !== 'string' ||\n    !refresh ||\n    typeof expiresIn !== 'number' ||\n    !Number.isFinite(expiresIn) ||\n    expiresIn <= 0\n  ) {\n    throw new Error(`Kimi For Coding token ${operation} response missing fields`);\n  }\n  return { access, refresh, expires: Date.now() + expiresIn * 1000, deviceId };\n}\n\nexport interface KimiCodingDeviceLoginPending {\n  clientId: string;\n  deviceId: string;\n  deviceCode: string;\n  userCode: string;\n  url: string;\n  instructions: string;\n  state: DeviceCodePollState;\n}\n\nexport type KimiCodingDevicePollResult =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending: KimiCodingDeviceLoginPending }\n  | { status: 'failed'; error: string };\n\nexport async function startKimiCodingDeviceLogin(options?: {\n  signal?: AbortSignal;\n}): Promise<KimiCodingDeviceLoginPending> {\n  const clientId = CLIENT_ID;\n  const deviceId = createKimiCodingDeviceId();\n  const response = await fetch(`${OAUTH_HOST}/api/oauth/device_authorization`, {\n    method: 'POST',\n    headers: {\n      ...getKimiCodingDeviceHeaders(deviceId),\n      'Content-Type': 'application/x-www-form-urlencoded',\n      Accept: 'application/json',\n    },\n    body: new URLSearchParams({ client_id: clientId }).toString(),\n    signal: requestSignal(options?.signal),\n  });\n  if (!response.ok) {\n    throw new Error(`Kimi For Coding device authorization failed: ${response.status}`);\n  }\n\n  const data = await readJson(response);\n  const deviceCode = data?.device_code;\n  const userCode = data?.user_code;\n  const verificationUri = trustedHttpUrl(data?.verification_uri);\n  const verificationUriComplete = trustedHttpUrl(data?.verification_uri_complete);\n  if (\n    typeof deviceCode !== 'string' ||\n    !deviceCode ||\n    typeof userCode !== 'string' ||\n    !userCode ||\n    !verificationUri ||\n    !verificationUriComplete\n  ) {\n    throw new Error('Invalid Kimi For Coding device authorization response');\n  }\n\n  const interval = data?.interval;\n  const expiresIn = data?.expires_in;\n  return {\n    clientId,\n    deviceId,\n    deviceCode,\n    userCode,\n    url: verificationUriComplete,\n    instructions: `Enter code: ${userCode}`,\n    state: createDeviceCodePollState({\n      intervalSeconds:\n        typeof interval === 'number' && Number.isFinite(interval) && interval > 0\n          ? interval\n          : DEFAULT_POLL_INTERVAL_SECONDS,\n      expiresInSeconds:\n        typeof expiresIn === 'number' && Number.isFinite(expiresIn) && expiresIn > 0\n          ? expiresIn\n          : DEFAULT_EXPIRES_IN_SECONDS,\n    }),\n  };\n}\n\nasync function pollKimiCodingTokenOnce(\n  pending: KimiCodingDeviceLoginPending,\n  signal?: AbortSignal,\n): Promise<DeviceCodePollOutcome<OAuthCredentials>> {\n  const response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {\n    method: 'POST',\n    headers: {\n      ...getKimiCodingDeviceHeaders(pending.deviceId),\n      'Content-Type': 'application/x-www-form-urlencoded',\n      Accept: 'application/json',\n    },\n    body: new URLSearchParams({\n      client_id: pending.clientId,\n      device_code: pending.deviceCode,\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n    }).toString(),\n    signal: requestSignal(signal),\n  });\n  const data = await readJson(response);\n  if (response.ok && typeof data?.access_token === 'string') {\n    try {\n      return { status: 'complete', result: credentialsFromTokenResponse(data, 'poll', pending.deviceId) };\n    } catch (error) {\n      return { status: 'failed', error: error instanceof Error ? error.message : String(error) };\n    }\n  }\n\n  const error = data?.error;\n  if (error === 'authorization_pending') return { status: 'pending' };\n  if (error === 'slow_down') {\n    return {\n      status: 'slow_down',\n      intervalSeconds: typeof data?.interval === 'number' && data.interval > 0 ? data.interval : undefined,\n    };\n  }\n  if (error === 'expired_token') {\n    return { status: 'failed', error: 'Kimi For Coding authorization expired. Please restart login.' };\n  }\n  if (error === 'access_denied') return { status: 'failed', error: 'Kimi For Coding login was denied.' };\n  return {\n    status: 'failed',\n    error: `Kimi For Coding token request failed: ${response.status}`,\n  };\n}\n\nexport async function pollKimiCodingDeviceLogin(\n  pending: KimiCodingDeviceLoginPending,\n  options?: { signal?: AbortSignal },\n): Promise<KimiCodingDevicePollResult> {\n  const step = await stepDeviceCodePoll(pending.state, () => pollKimiCodingTokenOnce(pending, options?.signal));\n  if (step.status === 'complete') return { status: 'complete', credentials: step.result };\n  if (step.status === 'failed') return { status: 'failed', error: step.error };\n  return {\n    status: 'pending',\n    nextPollMs: step.nextPollMs,\n    pending: { ...pending, state: step.state },\n  };\n}\n\nexport async function loginKimiCoding(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const pending = await startKimiCodingDeviceLogin({ signal: callbacks.signal });\n  callbacks.onAuth({ url: pending.url, instructions: pending.instructions });\n  callbacks.onProgress?.('Waiting for Kimi For Coding device authorization...');\n  return pollDeviceCodeUntilComplete({\n    state: pending.state,\n    pollOnce: () => pollKimiCodingTokenOnce(pending, callbacks.signal),\n    signal: callbacks.signal,\n  });\n}\n\nexport async function refreshKimiCodingToken(\n  refreshToken: string,\n  options: { signal?: AbortSignal; deviceId: string },\n): Promise<OAuthCredentials> {\n  const clientId = CLIENT_ID;\n  const deviceHeaders = getKimiCodingDeviceHeaders(options.deviceId);\n  let lastError: Error | undefined;\n  for (let attempt = 0; attempt <= REFRESH_MAX_RETRIES; attempt++) {\n    if (attempt > 0) await abortableSleep(1000 * 2 ** (attempt - 1), options.signal);\n    let response: Response;\n    try {\n      response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {\n        method: 'POST',\n        headers: {\n          ...deviceHeaders,\n          'Content-Type': 'application/x-www-form-urlencoded',\n          Accept: 'application/json',\n        },\n        body: new URLSearchParams({\n          client_id: clientId,\n          grant_type: 'refresh_token',\n          refresh_token: refreshToken,\n        }).toString(),\n        signal: requestSignal(options.signal),\n      });\n    } catch (error) {\n      lastError = error instanceof Error ? error : new Error(String(error));\n      if (attempt === REFRESH_MAX_RETRIES) throw lastError;\n      continue;\n    }\n    const data = await readJson(response);\n    if (response.ok) return credentialsFromTokenResponse(data, 'refresh', options.deviceId);\n\n    const error = typeof data?.error === 'string' ? ` ${data.error}` : '';\n    lastError = new Error(`Kimi For Coding token refresh failed: ${response.status}${error}`);\n    const retryable = response.status === 429 || response.status >= 500;\n    if (!retryable || attempt === REFRESH_MAX_RETRIES) throw lastError;\n  }\n  throw lastError ?? new Error('Kimi For Coding token refresh failed');\n}\n\nexport const kimiCodingOAuthProvider: OAuthProviderInterface = {\n  id: 'kimi-for-coding',\n  name: 'Kimi For Coding',\n  login: loginKimiCoding,\n  refreshToken: credentials =>\n    refreshKimiCodingToken(credentials.refresh, {\n      deviceId: typeof credentials.deviceId === 'string' ? credentials.deviceId : '',\n    }),\n  getApiKey: credentials => credentials.access,\n};\n"],"mappings":";;;;AAWA,MAAM,YAAY;AAClB,MAAM,aAAa;AACnB,MAAM,oBAAoB;AAC1B,MAAM,6BAA6B;AACnC,MAAM,gCAAgC;AACtC,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,SAAS,iBAAiB,OAAuB;CAE/C,OADkB,MAAM,QAAQ,iBAAiB,EAAE,CAAC,CAAC,KACtC,KAAK;AACtB;AAEA,MAAM,sBAAsB;CAC1B,kBAAkB;CAClB,iBAAiB,iBAAiB,kBAAkB,CAAC;CACrD,qBAAqB,iBAAiB,SAAS,CAAC;CAChD,sBAAsB,iBAAiB,GAAG,SAAS,EAAE,GAAG,KAAK,GAAG;CAChE,oBAAoB,iBAAiB,QAAQ,CAAC;AAChD;AAEA,SAAgB,2BAAmC;CACjD,OAAO,WAAW,OAAO,WAAW,CAAC,CAAC,WAAW,KAAK,EAAE;AAC1D;AAEA,SAAgB,qBAAqB,OAAiC;CACpE,OAAO,OAAO,UAAU,YAAY,kBAAkB,KAAK,KAAK;AAClE;AAEA,SAAgB,2BAA2B,UAA0C;CACnF,IAAI,CAAC,qBAAqB,QAAQ,GAChC,MAAM,IAAI,MAAM,sFAAsF;CAExG,OAAO;EAAE,GAAG;EAAqB,mBAAmB;CAAS;AAC/D;AAEA,SAAS,cAAc,QAAmC;CACxD,MAAM,UAAU,YAAY,QAAQ,kBAAkB;CACtD,OAAO,SAAS,YAAY,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI;AACvD;AAEA,SAAS,eAAe,OAA+B;CACrD,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO;CAChD,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EACzB,OAAO,IAAI,aAAa,WAAW,IAAI,OAAO;CAChD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,SAAS,UAA6D;CACnF,IAAI;EACF,MAAM,QAAS,MAAM,SAAS,KAAK;EACnC,OAAO,SAAS,OAAO,UAAU,WAAY,QAAoC;CACnF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,6BAA6B,OAAgB,WAAmB,UAAoC;CAC3G,MAAM,OAAQ,SAAS,CAAC;CACxB,MAAM,SAAS,KAAK;CACpB,MAAM,UAAU,KAAK;CACrB,MAAM,YAAY,KAAK;CACvB,IACE,OAAO,WAAW,YAClB,CAAC,UACD,OAAO,YAAY,YACnB,CAAC,WACD,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GAEb,MAAM,IAAI,MAAM,yBAAyB,UAAU,yBAAyB;CAE9E,OAAO;EAAE;EAAQ;EAAS,SAAS,KAAK,IAAI,IAAI,YAAY;EAAM;CAAS;AAC7E;AAiBA,eAAsB,2BAA2B,SAEP;CACxC,MAAM,WAAW;CACjB,MAAM,WAAW,yBAAyB;CAC1C,MAAM,WAAW,MAAM,MAAM,GAAG,WAAW,kCAAkC;EAC3E,QAAQ;EACR,SAAS;GACP,GAAG,2BAA2B,QAAQ;GACtC,gBAAgB;GAChB,QAAQ;EACV;EACA,MAAM,IAAI,gBAAgB,EAAE,WAAW,SAAS,CAAC,CAAC,CAAC,SAAS;EAC5D,QAAQ,cAAc,SAAS,MAAM;CACvC,CAAC;CACD,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,gDAAgD,SAAS,QAAQ;CAGnF,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,MAAM,aAAa,MAAM;CACzB,MAAM,WAAW,MAAM;CACvB,MAAM,kBAAkB,eAAe,MAAM,gBAAgB;CAC7D,MAAM,0BAA0B,eAAe,MAAM,yBAAyB;CAC9E,IACE,OAAO,eAAe,YACtB,CAAC,cACD,OAAO,aAAa,YACpB,CAAC,YACD,CAAC,mBACD,CAAC,yBAED,MAAM,IAAI,MAAM,uDAAuD;CAGzE,MAAM,WAAW,MAAM;CACvB,MAAM,YAAY,MAAM;CACxB,OAAO;EACL;EACA;EACA;EACA;EACA,KAAK;EACL,cAAc,eAAe;EAC7B,OAAO,0BAA0B;GAC/B,iBACE,OAAO,aAAa,YAAY,OAAO,SAAS,QAAQ,KAAK,WAAW,IACpE,WACA;GACN,kBACE,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,KAAK,YAAY,IACvE,YACA;EACR,CAAC;CACH;AACF;AAEA,eAAe,wBACb,SACA,QACkD;CAClD,MAAM,WAAW,MAAM,MAAM,GAAG,WAAW,mBAAmB;EAC5D,QAAQ;EACR,SAAS;GACP,GAAG,2BAA2B,QAAQ,QAAQ;GAC9C,gBAAgB;GAChB,QAAQ;EACV;EACA,MAAM,IAAI,gBAAgB;GACxB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB,YAAY;EACd,CAAC,CAAC,CAAC,SAAS;EACZ,QAAQ,cAAc,MAAM;CAC9B,CAAC;CACD,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,SAAS,MAAM,OAAO,MAAM,iBAAiB,UAC/C,IAAI;EACF,OAAO;GAAE,QAAQ;GAAY,QAAQ,6BAA6B,MAAM,QAAQ,QAAQ,QAAQ;EAAE;CACpG,SAAS,OAAO;EACd,OAAO;GAAE,QAAQ;GAAU,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAAE;CAC3F;CAGF,MAAM,QAAQ,MAAM;CACpB,IAAI,UAAU,yBAAyB,OAAO,EAAE,QAAQ,UAAU;CAClE,IAAI,UAAU,aACZ,OAAO;EACL,QAAQ;EACR,iBAAiB,OAAO,MAAM,aAAa,YAAY,KAAK,WAAW,IAAI,KAAK,WAAW,KAAA;CAC7F;CAEF,IAAI,UAAU,iBACZ,OAAO;EAAE,QAAQ;EAAU,OAAO;CAA+D;CAEnG,IAAI,UAAU,iBAAiB,OAAO;EAAE,QAAQ;EAAU,OAAO;CAAoC;CACrG,OAAO;EACL,QAAQ;EACR,OAAO,yCAAyC,SAAS;CAC3D;AACF;AAEA,eAAsB,0BACpB,SACA,SACqC;CACrC,MAAM,OAAO,MAAM,mBAAmB,QAAQ,aAAa,wBAAwB,SAAS,SAAS,MAAM,CAAC;CAC5G,IAAI,KAAK,WAAW,YAAY,OAAO;EAAE,QAAQ;EAAY,aAAa,KAAK;CAAO;CACtF,IAAI,KAAK,WAAW,UAAU,OAAO;EAAE,QAAQ;EAAU,OAAO,KAAK;CAAM;CAC3E,OAAO;EACL,QAAQ;EACR,YAAY,KAAK;EACjB,SAAS;GAAE,GAAG;GAAS,OAAO,KAAK;EAAM;CAC3C;AACF;AAEA,eAAsB,gBAAgB,WAA2D;CAC/F,MAAM,UAAU,MAAM,2BAA2B,EAAE,QAAQ,UAAU,OAAO,CAAC;CAC7E,UAAU,OAAO;EAAE,KAAK,QAAQ;EAAK,cAAc,QAAQ;CAAa,CAAC;CACzE,UAAU,aAAa,qDAAqD;CAC5E,OAAO,4BAA4B;EACjC,OAAO,QAAQ;EACf,gBAAgB,wBAAwB,SAAS,UAAU,MAAM;EACjE,QAAQ,UAAU;CACpB,CAAC;AACH;AAEA,eAAsB,uBACpB,cACA,SAC2B;CAC3B,MAAM,WAAW;CACjB,MAAM,gBAAgB,2BAA2B,QAAQ,QAAQ;CACjE,IAAI;CACJ,KAAK,IAAI,UAAU,GAAG,WAAW,qBAAqB,WAAW;EAC/D,IAAI,UAAU,GAAG,MAAM,eAAe,MAAO,MAAM,UAAU,IAAI,QAAQ,MAAM;EAC/E,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,MAAM,GAAG,WAAW,mBAAmB;IACtD,QAAQ;IACR,SAAS;KACP,GAAG;KACH,gBAAgB;KAChB,QAAQ;IACV;IACA,MAAM,IAAI,gBAAgB;KACxB,WAAW;KACX,YAAY;KACZ,eAAe;IACjB,CAAC,CAAC,CAAC,SAAS;IACZ,QAAQ,cAAc,QAAQ,MAAM;GACtC,CAAC;EACH,SAAS,OAAO;GACd,YAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GACpE,IAAI,YAAY,qBAAqB,MAAM;GAC3C;EACF;EACA,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,SAAS,IAAI,OAAO,6BAA6B,MAAM,WAAW,QAAQ,QAAQ;EAEtF,MAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,IAAI,KAAK,UAAU;EACnE,4BAAY,IAAI,MAAM,yCAAyC,SAAS,SAAS,OAAO;EAExF,IAAI,EADc,SAAS,WAAW,OAAO,SAAS,UAAU,QAC9C,YAAY,qBAAqB,MAAM;CAC3D;CACA,MAAM,6BAAa,IAAI,MAAM,sCAAsC;AACrE;AAEA,MAAa,0BAAkD;CAC7D,IAAI;CACJ,MAAM;CACN,OAAO;CACP,eAAc,gBACZ,uBAAuB,YAAY,SAAS,EAC1C,UAAU,OAAO,YAAY,aAAa,WAAW,YAAY,WAAW,GAC9E,CAAC;CACH,YAAW,gBAAe,YAAY;AACxC"}
+{"version":3,"file":"kimi-coding.js","names":[],"sources":["../../../src/auth/providers/kimi-coding.ts"],"sourcesContent":["import { arch, hostname, platform, release } from 'node:os';\nimport { getCurrentVersion } from '../../utils/update-check.js';\nimport {\n  abortableSleep,\n  createDeviceCodePollState,\n  pollDeviceCodeUntilComplete,\n  stepDeviceCodePoll,\n} from '../device-code.js';\nimport type { DeviceCodePollOutcome, DeviceCodePollState } from '../device-code.js';\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';\n\nconst CLIENT_ID = '17e5f671-d194-4dfb-9706-5516cb48c098';\nconst OAUTH_HOST = 'https://auth.kimi.com';\nconst DEVICE_ID_PATTERN = /^[0-9a-f]{32}$/;\nconst DEFAULT_EXPIRES_IN_SECONDS = 15 * 60;\nconst DEFAULT_POLL_INTERVAL_SECONDS = 5;\nconst REQUEST_TIMEOUT_MS = 30_000;\nconst REFRESH_MAX_RETRIES = 3;\n\nfunction asciiHeaderValue(value: string): string {\n  const sanitized = value.replace(/[^\\x20-\\x7E]/g, '').trim();\n  return sanitized || 'unknown';\n}\n\nconst KIMI_DEVICE_DETAILS = {\n  'X-Msh-Platform': 'mastracode',\n  'X-Msh-Version': asciiHeaderValue(getCurrentVersion()),\n  'X-Msh-Device-Name': asciiHeaderValue(hostname()),\n  'X-Msh-Device-Model': asciiHeaderValue(`${platform()} ${arch()}`),\n  'X-Msh-Os-Version': asciiHeaderValue(release()),\n};\n\nexport function createKimiCodingDeviceId(): string {\n  return globalThis.crypto.randomUUID().replaceAll('-', '');\n}\n\nexport function isKimiCodingDeviceId(value: unknown): value is string {\n  return typeof value === 'string' && DEVICE_ID_PATTERN.test(value);\n}\n\nexport function getKimiCodingDeviceHeaders(deviceId: string): Record<string, string> {\n  if (!isKimiCodingDeviceId(deviceId)) {\n    throw new Error('Kimi For Coding credentials have an invalid device ID. Please reconnect the account.');\n  }\n  return { ...KIMI_DEVICE_DETAILS, 'X-Msh-Device-Id': deviceId };\n}\n\nfunction requestSignal(signal?: AbortSignal): AbortSignal {\n  const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return signal ? AbortSignal.any([timeout, signal]) : timeout;\n}\n\nfunction trustedHttpUrl(value: unknown): string | null {\n  if (typeof value !== 'string' || !value) return null;\n  try {\n    const url = new URL(value);\n    return url.protocol === 'https:' ? url.href : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function readJson(response: Response): Promise<Record<string, unknown> | null> {\n  try {\n    const value = (await response.json()) as unknown;\n    return value && typeof value === 'object' ? (value as Record<string, unknown>) : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction credentialsFromTokenResponse(value: unknown, operation: string, deviceId: string): OAuthCredentials {\n  const data = (value ?? {}) as Record<string, unknown>;\n  const access = data.access_token;\n  const refresh = data.refresh_token;\n  const expiresIn = data.expires_in;\n  if (\n    typeof access !== 'string' ||\n    !access ||\n    typeof refresh !== 'string' ||\n    !refresh ||\n    typeof expiresIn !== 'number' ||\n    !Number.isFinite(expiresIn) ||\n    expiresIn <= 0\n  ) {\n    throw new Error(`Kimi For Coding token ${operation} response missing fields`);\n  }\n  return { access, refresh, expires: Date.now() + expiresIn * 1000, deviceId };\n}\n\nexport interface KimiCodingDeviceLoginPending {\n  clientId: string;\n  deviceId: string;\n  deviceCode: string;\n  userCode: string;\n  url: string;\n  instructions: string;\n  state: DeviceCodePollState;\n}\n\nexport type KimiCodingDevicePollResult =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending: KimiCodingDeviceLoginPending }\n  | { status: 'failed'; error: string };\n\nexport async function startKimiCodingDeviceLogin(options?: {\n  signal?: AbortSignal;\n}): Promise<KimiCodingDeviceLoginPending> {\n  const clientId = CLIENT_ID;\n  const deviceId = createKimiCodingDeviceId();\n  const response = await fetch(`${OAUTH_HOST}/api/oauth/device_authorization`, {\n    method: 'POST',\n    headers: {\n      ...getKimiCodingDeviceHeaders(deviceId),\n      'Content-Type': 'application/x-www-form-urlencoded',\n      Accept: 'application/json',\n    },\n    body: new URLSearchParams({ client_id: clientId }).toString(),\n    signal: requestSignal(options?.signal),\n  });\n  if (!response.ok) {\n    throw new Error(`Kimi For Coding device authorization failed: ${response.status}`);\n  }\n\n  const data = await readJson(response);\n  const deviceCode = data?.device_code;\n  const userCode = data?.user_code;\n  const verificationUri = trustedHttpUrl(data?.verification_uri);\n  const verificationUriComplete = trustedHttpUrl(data?.verification_uri_complete);\n  if (\n    typeof deviceCode !== 'string' ||\n    !deviceCode ||\n    typeof userCode !== 'string' ||\n    !userCode ||\n    !verificationUri ||\n    !verificationUriComplete\n  ) {\n    throw new Error('Invalid Kimi For Coding device authorization response');\n  }\n\n  const interval = data?.interval;\n  const expiresIn = data?.expires_in;\n  return {\n    clientId,\n    deviceId,\n    deviceCode,\n    userCode,\n    url: verificationUriComplete,\n    instructions: `Enter code: ${userCode}`,\n    state: createDeviceCodePollState({\n      intervalSeconds:\n        typeof interval === 'number' && Number.isFinite(interval) && interval > 0\n          ? interval\n          : DEFAULT_POLL_INTERVAL_SECONDS,\n      expiresInSeconds:\n        typeof expiresIn === 'number' && Number.isFinite(expiresIn) && expiresIn > 0\n          ? expiresIn\n          : DEFAULT_EXPIRES_IN_SECONDS,\n    }),\n  };\n}\n\nasync function pollKimiCodingTokenOnce(\n  pending: KimiCodingDeviceLoginPending,\n  signal?: AbortSignal,\n): Promise<DeviceCodePollOutcome<OAuthCredentials>> {\n  const response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {\n    method: 'POST',\n    headers: {\n      ...getKimiCodingDeviceHeaders(pending.deviceId),\n      'Content-Type': 'application/x-www-form-urlencoded',\n      Accept: 'application/json',\n    },\n    body: new URLSearchParams({\n      client_id: pending.clientId,\n      device_code: pending.deviceCode,\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n    }).toString(),\n    signal: requestSignal(signal),\n  });\n  const data = await readJson(response);\n  if (response.ok && typeof data?.access_token === 'string') {\n    try {\n      return { status: 'complete', result: credentialsFromTokenResponse(data, 'poll', pending.deviceId) };\n    } catch (error) {\n      return { status: 'failed', error: error instanceof Error ? error.message : String(error) };\n    }\n  }\n\n  const error = data?.error;\n  if (error === 'authorization_pending') return { status: 'pending' };\n  if (error === 'slow_down') {\n    return {\n      status: 'slow_down',\n      intervalSeconds: typeof data?.interval === 'number' && data.interval > 0 ? data.interval : undefined,\n    };\n  }\n  if (error === 'expired_token') {\n    return { status: 'failed', error: 'Kimi For Coding authorization expired. Please restart login.' };\n  }\n  if (error === 'access_denied') return { status: 'failed', error: 'Kimi For Coding login was denied.' };\n  return {\n    status: 'failed',\n    error: `Kimi For Coding token request failed: ${response.status}`,\n  };\n}\n\nexport async function pollKimiCodingDeviceLogin(\n  pending: KimiCodingDeviceLoginPending,\n  options?: { signal?: AbortSignal },\n): Promise<KimiCodingDevicePollResult> {\n  const step = await stepDeviceCodePoll(pending.state, () => pollKimiCodingTokenOnce(pending, options?.signal));\n  if (step.status === 'complete') return { status: 'complete', credentials: step.result };\n  if (step.status === 'failed') return { status: 'failed', error: step.error };\n  return {\n    status: 'pending',\n    nextPollMs: step.nextPollMs,\n    pending: { ...pending, state: step.state },\n  };\n}\n\nexport async function loginKimiCoding(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const pending = await startKimiCodingDeviceLogin({ signal: callbacks.signal });\n  callbacks.onAuth({ url: pending.url, instructions: pending.instructions, userCode: pending.userCode });\n  callbacks.onProgress?.('Waiting for Kimi For Coding device authorization...');\n  return pollDeviceCodeUntilComplete({\n    state: pending.state,\n    pollOnce: () => pollKimiCodingTokenOnce(pending, callbacks.signal),\n    signal: callbacks.signal,\n  });\n}\n\nexport async function refreshKimiCodingToken(\n  refreshToken: string,\n  options: { signal?: AbortSignal; deviceId: string },\n): Promise<OAuthCredentials> {\n  const clientId = CLIENT_ID;\n  const deviceHeaders = getKimiCodingDeviceHeaders(options.deviceId);\n  let lastError: Error | undefined;\n  for (let attempt = 0; attempt <= REFRESH_MAX_RETRIES; attempt++) {\n    if (attempt > 0) await abortableSleep(1000 * 2 ** (attempt - 1), options.signal);\n    let response: Response;\n    try {\n      response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {\n        method: 'POST',\n        headers: {\n          ...deviceHeaders,\n          'Content-Type': 'application/x-www-form-urlencoded',\n          Accept: 'application/json',\n        },\n        body: new URLSearchParams({\n          client_id: clientId,\n          grant_type: 'refresh_token',\n          refresh_token: refreshToken,\n        }).toString(),\n        signal: requestSignal(options.signal),\n      });\n    } catch (error) {\n      lastError = error instanceof Error ? error : new Error(String(error));\n      if (attempt === REFRESH_MAX_RETRIES) throw lastError;\n      continue;\n    }\n    const data = await readJson(response);\n    if (response.ok) return credentialsFromTokenResponse(data, 'refresh', options.deviceId);\n\n    const error = typeof data?.error === 'string' ? ` ${data.error}` : '';\n    lastError = new Error(`Kimi For Coding token refresh failed: ${response.status}${error}`);\n    const retryable = response.status === 429 || response.status >= 500;\n    if (!retryable || attempt === REFRESH_MAX_RETRIES) throw lastError;\n  }\n  throw lastError ?? new Error('Kimi For Coding token refresh failed');\n}\n\nexport const kimiCodingOAuthProvider: OAuthProviderInterface = {\n  id: 'kimi-for-coding',\n  name: 'Kimi For Coding',\n  login: loginKimiCoding,\n  refreshToken: credentials =>\n    refreshKimiCodingToken(credentials.refresh, {\n      deviceId: typeof credentials.deviceId === 'string' ? credentials.deviceId : '',\n    }),\n  getApiKey: credentials => credentials.access,\n};\n"],"mappings":";;;;AAWA,MAAM,YAAY;AAClB,MAAM,aAAa;AACnB,MAAM,oBAAoB;AAC1B,MAAM,6BAA6B;AACnC,MAAM,gCAAgC;AACtC,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,SAAS,iBAAiB,OAAuB;CAE/C,OADkB,MAAM,QAAQ,iBAAiB,EAAE,CAAC,CAAC,KACtC,KAAK;AACtB;AAEA,MAAM,sBAAsB;CAC1B,kBAAkB;CAClB,iBAAiB,iBAAiB,kBAAkB,CAAC;CACrD,qBAAqB,iBAAiB,SAAS,CAAC;CAChD,sBAAsB,iBAAiB,GAAG,SAAS,EAAE,GAAG,KAAK,GAAG;CAChE,oBAAoB,iBAAiB,QAAQ,CAAC;AAChD;AAEA,SAAgB,2BAAmC;CACjD,OAAO,WAAW,OAAO,WAAW,CAAC,CAAC,WAAW,KAAK,EAAE;AAC1D;AAEA,SAAgB,qBAAqB,OAAiC;CACpE,OAAO,OAAO,UAAU,YAAY,kBAAkB,KAAK,KAAK;AAClE;AAEA,SAAgB,2BAA2B,UAA0C;CACnF,IAAI,CAAC,qBAAqB,QAAQ,GAChC,MAAM,IAAI,MAAM,sFAAsF;CAExG,OAAO;EAAE,GAAG;EAAqB,mBAAmB;CAAS;AAC/D;AAEA,SAAS,cAAc,QAAmC;CACxD,MAAM,UAAU,YAAY,QAAQ,kBAAkB;CACtD,OAAO,SAAS,YAAY,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI;AACvD;AAEA,SAAS,eAAe,OAA+B;CACrD,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO;CAChD,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EACzB,OAAO,IAAI,aAAa,WAAW,IAAI,OAAO;CAChD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,SAAS,UAA6D;CACnF,IAAI;EACF,MAAM,QAAS,MAAM,SAAS,KAAK;EACnC,OAAO,SAAS,OAAO,UAAU,WAAY,QAAoC;CACnF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,6BAA6B,OAAgB,WAAmB,UAAoC;CAC3G,MAAM,OAAQ,SAAS,CAAC;CACxB,MAAM,SAAS,KAAK;CACpB,MAAM,UAAU,KAAK;CACrB,MAAM,YAAY,KAAK;CACvB,IACE,OAAO,WAAW,YAClB,CAAC,UACD,OAAO,YAAY,YACnB,CAAC,WACD,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GAEb,MAAM,IAAI,MAAM,yBAAyB,UAAU,yBAAyB;CAE9E,OAAO;EAAE;EAAQ;EAAS,SAAS,KAAK,IAAI,IAAI,YAAY;EAAM;CAAS;AAC7E;AAiBA,eAAsB,2BAA2B,SAEP;CACxC,MAAM,WAAW;CACjB,MAAM,WAAW,yBAAyB;CAC1C,MAAM,WAAW,MAAM,MAAM,GAAG,WAAW,kCAAkC;EAC3E,QAAQ;EACR,SAAS;GACP,GAAG,2BAA2B,QAAQ;GACtC,gBAAgB;GAChB,QAAQ;EACV;EACA,MAAM,IAAI,gBAAgB,EAAE,WAAW,SAAS,CAAC,CAAC,CAAC,SAAS;EAC5D,QAAQ,cAAc,SAAS,MAAM;CACvC,CAAC;CACD,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,gDAAgD,SAAS,QAAQ;CAGnF,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,MAAM,aAAa,MAAM;CACzB,MAAM,WAAW,MAAM;CACvB,MAAM,kBAAkB,eAAe,MAAM,gBAAgB;CAC7D,MAAM,0BAA0B,eAAe,MAAM,yBAAyB;CAC9E,IACE,OAAO,eAAe,YACtB,CAAC,cACD,OAAO,aAAa,YACpB,CAAC,YACD,CAAC,mBACD,CAAC,yBAED,MAAM,IAAI,MAAM,uDAAuD;CAGzE,MAAM,WAAW,MAAM;CACvB,MAAM,YAAY,MAAM;CACxB,OAAO;EACL;EACA;EACA;EACA;EACA,KAAK;EACL,cAAc,eAAe;EAC7B,OAAO,0BAA0B;GAC/B,iBACE,OAAO,aAAa,YAAY,OAAO,SAAS,QAAQ,KAAK,WAAW,IACpE,WACA;GACN,kBACE,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,KAAK,YAAY,IACvE,YACA;EACR,CAAC;CACH;AACF;AAEA,eAAe,wBACb,SACA,QACkD;CAClD,MAAM,WAAW,MAAM,MAAM,GAAG,WAAW,mBAAmB;EAC5D,QAAQ;EACR,SAAS;GACP,GAAG,2BAA2B,QAAQ,QAAQ;GAC9C,gBAAgB;GAChB,QAAQ;EACV;EACA,MAAM,IAAI,gBAAgB;GACxB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB,YAAY;EACd,CAAC,CAAC,CAAC,SAAS;EACZ,QAAQ,cAAc,MAAM;CAC9B,CAAC;CACD,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,SAAS,MAAM,OAAO,MAAM,iBAAiB,UAC/C,IAAI;EACF,OAAO;GAAE,QAAQ;GAAY,QAAQ,6BAA6B,MAAM,QAAQ,QAAQ,QAAQ;EAAE;CACpG,SAAS,OAAO;EACd,OAAO;GAAE,QAAQ;GAAU,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAAE;CAC3F;CAGF,MAAM,QAAQ,MAAM;CACpB,IAAI,UAAU,yBAAyB,OAAO,EAAE,QAAQ,UAAU;CAClE,IAAI,UAAU,aACZ,OAAO;EACL,QAAQ;EACR,iBAAiB,OAAO,MAAM,aAAa,YAAY,KAAK,WAAW,IAAI,KAAK,WAAW,KAAA;CAC7F;CAEF,IAAI,UAAU,iBACZ,OAAO;EAAE,QAAQ;EAAU,OAAO;CAA+D;CAEnG,IAAI,UAAU,iBAAiB,OAAO;EAAE,QAAQ;EAAU,OAAO;CAAoC;CACrG,OAAO;EACL,QAAQ;EACR,OAAO,yCAAyC,SAAS;CAC3D;AACF;AAEA,eAAsB,0BACpB,SACA,SACqC;CACrC,MAAM,OAAO,MAAM,mBAAmB,QAAQ,aAAa,wBAAwB,SAAS,SAAS,MAAM,CAAC;CAC5G,IAAI,KAAK,WAAW,YAAY,OAAO;EAAE,QAAQ;EAAY,aAAa,KAAK;CAAO;CACtF,IAAI,KAAK,WAAW,UAAU,OAAO;EAAE,QAAQ;EAAU,OAAO,KAAK;CAAM;CAC3E,OAAO;EACL,QAAQ;EACR,YAAY,KAAK;EACjB,SAAS;GAAE,GAAG;GAAS,OAAO,KAAK;EAAM;CAC3C;AACF;AAEA,eAAsB,gBAAgB,WAA2D;CAC/F,MAAM,UAAU,MAAM,2BAA2B,EAAE,QAAQ,UAAU,OAAO,CAAC;CAC7E,UAAU,OAAO;EAAE,KAAK,QAAQ;EAAK,cAAc,QAAQ;EAAc,UAAU,QAAQ;CAAS,CAAC;CACrG,UAAU,aAAa,qDAAqD;CAC5E,OAAO,4BAA4B;EACjC,OAAO,QAAQ;EACf,gBAAgB,wBAAwB,SAAS,UAAU,MAAM;EACjE,QAAQ,UAAU;CACpB,CAAC;AACH;AAEA,eAAsB,uBACpB,cACA,SAC2B;CAC3B,MAAM,WAAW;CACjB,MAAM,gBAAgB,2BAA2B,QAAQ,QAAQ;CACjE,IAAI;CACJ,KAAK,IAAI,UAAU,GAAG,WAAW,qBAAqB,WAAW;EAC/D,IAAI,UAAU,GAAG,MAAM,eAAe,MAAO,MAAM,UAAU,IAAI,QAAQ,MAAM;EAC/E,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,MAAM,GAAG,WAAW,mBAAmB;IACtD,QAAQ;IACR,SAAS;KACP,GAAG;KACH,gBAAgB;KAChB,QAAQ;IACV;IACA,MAAM,IAAI,gBAAgB;KACxB,WAAW;KACX,YAAY;KACZ,eAAe;IACjB,CAAC,CAAC,CAAC,SAAS;IACZ,QAAQ,cAAc,QAAQ,MAAM;GACtC,CAAC;EACH,SAAS,OAAO;GACd,YAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GACpE,IAAI,YAAY,qBAAqB,MAAM;GAC3C;EACF;EACA,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,SAAS,IAAI,OAAO,6BAA6B,MAAM,WAAW,QAAQ,QAAQ;EAEtF,MAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,IAAI,KAAK,UAAU;EACnE,4BAAY,IAAI,MAAM,yCAAyC,SAAS,SAAS,OAAO;EAExF,IAAI,EADc,SAAS,WAAW,OAAO,SAAS,UAAU,QAC9C,YAAY,qBAAqB,MAAM;CAC3D;CACA,MAAM,6BAAa,IAAI,MAAM,sCAAsC;AACrE;AAEA,MAAa,0BAAkD;CAC7D,IAAI;CACJ,MAAM;CACN,OAAO;CACP,eAAc,gBACZ,uBAAuB,YAAY,SAAS,EAC1C,UAAU,OAAO,YAAY,aAAa,WAAW,YAAY,WAAW,GAC9E,CAAC;CACH,YAAW,gBAAe,YAAY;AACxC"}

package/dist/auth/providers/xai.js

@@ -162,7 +162,8 @@ async function loginXAI(callbacks) {
 	const pending = await startXAIDeviceLogin({ signal: callbacks.signal });
 	callbacks.onAuth({
 		url: pending.url,
-		instructions: pending.instructions
+		instructions: pending.instructions,
+		userCode: pending.userCode
 	});
 	callbacks.onProgress?.("Waiting for xAI device authorization...");
 	return pollDeviceCodeUntilComplete({

package/dist/auth/providers/xai.js.map

@@ -1 +1 @@
-{"version":3,"file":"xai.js","names":[],"sources":["../../../src/auth/providers/xai.ts"],"sourcesContent":["/**\n * xAI OAuth flow (Grok)\n *\n * Ported from pi-mono's xAI OAuth implementation:\n * https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/xai.ts\n *\n * xAI uses a standard RFC 8628 device authorization grant, so the flow needs\n * no inbound connection to the server. The primitives are split into\n * `startXAIDeviceLogin()` / `pollXAIDeviceLogin()` so web routes can persist\n * the JSON-serializable pending state between HTTP requests; the blocking\n * `loginXAI()` wraps them for TUI use.\n */\n\nimport { createDeviceCodePollState, pollDeviceCodeUntilComplete, stepDeviceCodePoll } from '../device-code.js';\nimport type { DeviceCodePollOutcome, DeviceCodePollState } from '../device-code.js';\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';\n\nconst CLIENT_ID = 'b1a00492-073a-47ea-816f-4c329264a828';\nconst DEVICE_CODE_URL = 'https://auth.x.ai/oauth2/device/code';\nconst TOKEN_URL = 'https://auth.x.ai/oauth2/token';\nconst SCOPE = 'openid profile email offline_access grok-cli:access api:access';\nconst DEVICE_CODE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';\nconst DEFAULT_TOKEN_EXPIRES_IN_SECONDS = 3600;\nconst REQUEST_TIMEOUT_MS = 30_000;\n// Refresh 5 minutes before actual expiry (same skew as Anthropic).\nconst REFRESH_SKEW_MS = 5 * 60 * 1000;\n\nasync function postForm(url: string, params: Record<string, string>, signal?: AbortSignal): Promise<Response> {\n  const timeoutSignal = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return fetch(url, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n    body: new URLSearchParams(params).toString(),\n    signal: signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal,\n  });\n}\n\n/** The verification URI is opened by the user; only accept https URLs. */\nfunction validateVerificationUri(raw: string): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    throw new Error('xAI device authorization returned an invalid verification_uri');\n  }\n  if (parsed.protocol !== 'https:') {\n    throw new Error('xAI device authorization returned a non-https verification_uri');\n  }\n  return parsed.toString();\n}\n\nfunction credentialsFromTokenResponse(\n  data: unknown,\n  previousRefreshToken?: string,\n  previousIdToken?: string,\n): OAuthCredentials {\n  const record = (data ?? {}) as Record<string, unknown>;\n  const access = record.access_token;\n  if (typeof access !== 'string' || access.length === 0) {\n    throw new Error('xAI token response missing access_token');\n  }\n\n  // xAI may not rotate the refresh token on refresh; keep the previous one.\n  const refresh =\n    typeof record.refresh_token === 'string' && record.refresh_token.length > 0\n      ? record.refresh_token\n      : previousRefreshToken;\n  if (!refresh) {\n    throw new Error('xAI token response missing refresh_token');\n  }\n\n  const expiresIn =\n    typeof record.expires_in === 'number' && record.expires_in > 0\n      ? record.expires_in\n      : DEFAULT_TOKEN_EXPIRES_IN_SECONDS;\n\n  return {\n    access,\n    refresh,\n    expires: Date.now() + expiresIn * 1000 - REFRESH_SKEW_MS,\n    // Kept so the account label can resolve the email claim later; xAI's\n    // refresh responses re-issue it, and the previous one is carried forward\n    // when they don't.\n    idToken: typeof record.id_token === 'string' && record.id_token.length > 0 ? record.id_token : previousIdToken,\n  };\n}\n\n/**\n * Serializable pending state for an xAI device-code login. Safe to persist\n * (e.g. a `pending jsonb` column) so polling can span HTTP requests.\n */\nexport interface XAIDeviceLoginPending {\n  deviceCode: string;\n  userCode: string;\n  /** Verification URL for the user to open (https-only, validated). */\n  url: string;\n  instructions: string;\n  /** RFC 8628 poll-loop state (interval growth, deadline, slow_down count). */\n  state: DeviceCodePollState;\n}\n\nexport type XAIDevicePollResult =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending: XAIDeviceLoginPending }\n  | { status: 'failed'; error: string };\n\n/**\n * Start an xAI device-code login: request a user code and return the\n * serializable pending state for subsequent polls.\n */\nexport async function startXAIDeviceLogin(options?: { signal?: AbortSignal }): Promise<XAIDeviceLoginPending> {\n  const response = await postForm(DEVICE_CODE_URL, { client_id: CLIENT_ID, scope: SCOPE }, options?.signal);\n\n  if (!response.ok) {\n    throw new Error(`Failed to initiate xAI device authorization: ${response.status}`);\n  }\n\n  const data = (await response.json()) as {\n    device_code?: string;\n    user_code?: string;\n    verification_uri?: string;\n    verification_uri_complete?: string;\n    interval?: number;\n    expires_in?: number;\n  };\n\n  if (!data.device_code || !data.user_code || !data.verification_uri) {\n    throw new Error('xAI device authorization response missing required fields');\n  }\n\n  const url = validateVerificationUri(data.verification_uri_complete ?? data.verification_uri);\n\n  return {\n    deviceCode: data.device_code,\n    userCode: data.user_code,\n    url,\n    instructions: `Enter code: ${data.user_code}`,\n    state: createDeviceCodePollState({\n      intervalSeconds: data.interval,\n      expiresInSeconds: typeof data.expires_in === 'number' && data.expires_in > 0 ? data.expires_in : 600,\n    }),\n  };\n}\n\nasync function pollXAITokenOnce(\n  pending: XAIDeviceLoginPending,\n  signal?: AbortSignal,\n): Promise<DeviceCodePollOutcome<OAuthCredentials>> {\n  const response = await postForm(\n    TOKEN_URL,\n    {\n      grant_type: DEVICE_CODE_GRANT_TYPE,\n      device_code: pending.deviceCode,\n      client_id: CLIENT_ID,\n    },\n    signal,\n  );\n\n  if (response.ok) {\n    const data = (await response.json()) as unknown;\n    try {\n      return { status: 'complete', result: credentialsFromTokenResponse(data) };\n    } catch (error) {\n      return { status: 'failed', error: error instanceof Error ? error.message : String(error) };\n    }\n  }\n\n  const text = await response.text().catch(() => '');\n  let body: { error?: string; interval?: number } = {};\n  try {\n    body = JSON.parse(text) as { error?: string; interval?: number };\n  } catch {\n    // Non-JSON upstream bodies are intentionally omitted from user-visible errors.\n  }\n\n  switch (body.error) {\n    case 'authorization_pending':\n      return { status: 'pending', intervalSeconds: body.interval };\n    case 'slow_down':\n      return { status: 'slow_down', intervalSeconds: body.interval };\n    case 'access_denied':\n    case 'authorization_denied':\n      return { status: 'failed', error: 'xAI authorization was denied' };\n    case 'expired_token':\n      return { status: 'failed', error: 'xAI device code expired before authorization completed' };\n    default:\n      // Status only: `body.error` is untrusted upstream text (RFC 6749 does not\n      // constrain it), so echoing it would render provider-controlled content\n      // in the TUI. The known flow codes above are handled explicitly.\n      return {\n        status: 'failed',\n        error: `xAI device authorization failed: ${response.status}`,\n      };\n  }\n}\n\n/**\n * Perform exactly one upstream poll for a pending xAI device login.\n * Returns the updated pending state so callers (e.g. web routes) can persist\n * slow_down interval growth between polls. Never throws for flow-level\n * conditions.\n */\nexport async function pollXAIDeviceLogin(\n  pending: XAIDeviceLoginPending,\n  options?: { signal?: AbortSignal },\n): Promise<XAIDevicePollResult> {\n  const step = await stepDeviceCodePoll(pending.state, () => pollXAITokenOnce(pending, options?.signal));\n\n  switch (step.status) {\n    case 'complete':\n      return { status: 'complete', credentials: step.result };\n    case 'failed':\n      return { status: 'failed', error: step.error };\n    case 'pending':\n    case 'slow_down':\n      return {\n        status: 'pending',\n        nextPollMs: step.nextPollMs,\n        pending: { ...pending, state: step.state },\n      };\n  }\n}\n\n/**\n * Login with xAI OAuth (device-code flow), blocking until authorized.\n */\nexport async function loginXAI(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const pending = await startXAIDeviceLogin({ signal: callbacks.signal });\n\n  callbacks.onAuth({ url: pending.url, instructions: pending.instructions });\n  callbacks.onProgress?.('Waiting for xAI device authorization...');\n\n  return pollDeviceCodeUntilComplete({\n    state: pending.state,\n    pollOnce: () => pollXAITokenOnce(pending, callbacks.signal),\n    signal: callbacks.signal,\n  });\n}\n\n/**\n * Refresh xAI OAuth token\n */\nexport async function refreshXAIToken(\n  refreshToken: string,\n  signal?: AbortSignal,\n  previousIdToken?: string,\n): Promise<OAuthCredentials> {\n  const response = await postForm(\n    TOKEN_URL,\n    {\n      grant_type: 'refresh_token',\n      client_id: CLIENT_ID,\n      refresh_token: refreshToken,\n    },\n    signal,\n  );\n\n  if (!response.ok) {\n    throw new Error(`xAI token refresh failed: ${response.status}`);\n  }\n\n  return credentialsFromTokenResponse((await response.json()) as unknown, refreshToken, previousIdToken);\n}\n\n/** Decode the email claim out of an id_token JWT payload (no verification). */\nfunction emailFromIdToken(idToken: string | undefined): string | undefined {\n  if (typeof idToken !== 'string') return undefined;\n  const parts = idToken.split('.');\n  if (parts.length !== 3) return undefined;\n  try {\n    const padded = (parts[1] ?? '').replace(/-/g, '+').replace(/_/g, '/');\n    const json = JSON.parse(Buffer.from(padded, 'base64').toString('utf8')) as { email?: unknown };\n    return typeof json.email === 'string' && json.email.length > 0 ? json.email : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport const xaiOAuthProvider: OAuthProviderInterface = {\n  id: 'xai',\n  name: 'xAI (Grok)',\n\n  async login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n    return loginXAI(callbacks);\n  },\n\n  async refreshToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {\n    return refreshXAIToken(credentials.refresh, undefined, credentials.idToken as string | undefined);\n  },\n\n  getApiKey(credentials: OAuthCredentials): string {\n    return credentials.access;\n  },\n\n  getAccountLabel(credentials: OAuthCredentials): Promise<string | undefined> {\n    return Promise.resolve(emailFromIdToken(credentials.idToken as string | undefined));\n  },\n\n  /**\n   * The account's email, read from the id token — one subscription per email,\n   * so this distinguishes two xAI accounts from a re-authorization of one.\n   */\n  getAccountIdentity(credentials: OAuthCredentials): string | undefined {\n    return emailFromIdToken(credentials.idToken as string | undefined);\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;AAiBA,MAAM,YAAY;AAClB,MAAM,kBAAkB;AACxB,MAAM,YAAY;AAClB,MAAM,QAAQ;AACd,MAAM,yBAAyB;AAC/B,MAAM,mCAAmC;AACzC,MAAM,qBAAqB;AAE3B,MAAM,kBAAkB,MAAS;AAEjC,eAAe,SAAS,KAAa,QAAgC,QAAyC;CAC5G,MAAM,gBAAgB,YAAY,QAAQ,kBAAkB;CAC5D,OAAO,MAAM,KAAK;EAChB,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D,MAAM,IAAI,gBAAgB,MAAM,CAAC,CAAC,SAAS;EAC3C,QAAQ,SAAS,YAAY,IAAI,CAAC,QAAQ,aAAa,CAAC,IAAI;CAC9D,CAAC;AACH;;AAGA,SAAS,wBAAwB,KAAqB;CACpD,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,+DAA+D;CACjF;CACA,IAAI,OAAO,aAAa,UACtB,MAAM,IAAI,MAAM,gEAAgE;CAElF,OAAO,OAAO,SAAS;AACzB;AAEA,SAAS,6BACP,MACA,sBACA,iBACkB;CAClB,MAAM,SAAU,QAAQ,CAAC;CACzB,MAAM,SAAS,OAAO;CACtB,IAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAClD,MAAM,IAAI,MAAM,yCAAyC;CAI3D,MAAM,UACJ,OAAO,OAAO,kBAAkB,YAAY,OAAO,cAAc,SAAS,IACtE,OAAO,gBACP;CACN,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,MAAM,YACJ,OAAO,OAAO,eAAe,YAAY,OAAO,aAAa,IACzD,OAAO,aACP;CAEN,OAAO;EACL;EACA;EACA,SAAS,KAAK,IAAI,IAAI,YAAY,MAAO;EAIzC,SAAS,OAAO,OAAO,aAAa,YAAY,OAAO,SAAS,SAAS,IAAI,OAAO,WAAW;CACjG;AACF;;;;;AAyBA,eAAsB,oBAAoB,SAAoE;CAC5G,MAAM,WAAW,MAAM,SAAS,iBAAiB;EAAE,WAAW;EAAW,OAAO;CAAM,GAAG,SAAS,MAAM;CAExG,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,gDAAgD,SAAS,QAAQ;CAGnF,MAAM,OAAQ,MAAM,SAAS,KAAK;CASlC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,aAAa,CAAC,KAAK,kBAChD,MAAM,IAAI,MAAM,2DAA2D;CAG7E,MAAM,MAAM,wBAAwB,KAAK,6BAA6B,KAAK,gBAAgB;CAE3F,OAAO;EACL,YAAY,KAAK;EACjB,UAAU,KAAK;EACf;EACA,cAAc,eAAe,KAAK;EAClC,OAAO,0BAA0B;GAC/B,iBAAiB,KAAK;GACtB,kBAAkB,OAAO,KAAK,eAAe,YAAY,KAAK,aAAa,IAAI,KAAK,aAAa;EACnG,CAAC;CACH;AACF;AAEA,eAAe,iBACb,SACA,QACkD;CAClD,MAAM,WAAW,MAAM,SACrB,WACA;EACE,YAAY;EACZ,aAAa,QAAQ;EACrB,WAAW;CACb,GACA,MACF;CAEA,IAAI,SAAS,IAAI;EACf,MAAM,OAAQ,MAAM,SAAS,KAAK;EAClC,IAAI;GACF,OAAO;IAAE,QAAQ;IAAY,QAAQ,6BAA6B,IAAI;GAAE;EAC1E,SAAS,OAAO;GACd,OAAO;IAAE,QAAQ;IAAU,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAAE;EAC3F;CACF;CAEA,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;CACjD,IAAI,OAA8C,CAAC;CACnD,IAAI;EACF,OAAO,KAAK,MAAM,IAAI;CACxB,QAAQ,CAER;CAEA,QAAQ,KAAK,OAAb;EACE,KAAK,yBACH,OAAO;GAAE,QAAQ;GAAW,iBAAiB,KAAK;EAAS;EAC7D,KAAK,aACH,OAAO;GAAE,QAAQ;GAAa,iBAAiB,KAAK;EAAS;EAC/D,KAAK;EACL,KAAK,wBACH,OAAO;GAAE,QAAQ;GAAU,OAAO;EAA+B;EACnE,KAAK,iBACH,OAAO;GAAE,QAAQ;GAAU,OAAO;EAAyD;EAC7F,SAIE,OAAO;GACL,QAAQ;GACR,OAAO,oCAAoC,SAAS;EACtD;CACJ;AACF;;;;;;;AAQA,eAAsB,mBACpB,SACA,SAC8B;CAC9B,MAAM,OAAO,MAAM,mBAAmB,QAAQ,aAAa,iBAAiB,SAAS,SAAS,MAAM,CAAC;CAErG,QAAQ,KAAK,QAAb;EACE,KAAK,YACH,OAAO;GAAE,QAAQ;GAAY,aAAa,KAAK;EAAO;EACxD,KAAK,UACH,OAAO;GAAE,QAAQ;GAAU,OAAO,KAAK;EAAM;EAC/C,KAAK;EACL,KAAK,aACH,OAAO;GACL,QAAQ;GACR,YAAY,KAAK;GACjB,SAAS;IAAE,GAAG;IAAS,OAAO,KAAK;GAAM;EAC3C;CACJ;AACF;;;;AAKA,eAAsB,SAAS,WAA2D;CACxF,MAAM,UAAU,MAAM,oBAAoB,EAAE,QAAQ,UAAU,OAAO,CAAC;CAEtE,UAAU,OAAO;EAAE,KAAK,QAAQ;EAAK,cAAc,QAAQ;CAAa,CAAC;CACzE,UAAU,aAAa,yCAAyC;CAEhE,OAAO,4BAA4B;EACjC,OAAO,QAAQ;EACf,gBAAgB,iBAAiB,SAAS,UAAU,MAAM;EAC1D,QAAQ,UAAU;CACpB,CAAC;AACH;;;;AAKA,eAAsB,gBACpB,cACA,QACA,iBAC2B;CAC3B,MAAM,WAAW,MAAM,SACrB,WACA;EACE,YAAY;EACZ,WAAW;EACX,eAAe;CACjB,GACA,MACF;CAEA,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,6BAA6B,SAAS,QAAQ;CAGhE,OAAO,6BAA8B,MAAM,SAAS,KAAK,GAAe,cAAc,eAAe;AACvG;;AAGA,SAAS,iBAAiB,SAAiD;CACzE,IAAI,OAAO,YAAY,UAAU,OAAO,KAAA;CACxC,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,GAAG,OAAO,KAAA;CAC/B,IAAI;EACF,MAAM,UAAU,MAAM,MAAM,GAAA,CAAI,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;EACpE,MAAM,OAAO,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC;EACtE,OAAO,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ,KAAA;CAChF,QAAQ;EACN;CACF;AACF;AAEA,MAAa,mBAA2C;CACtD,IAAI;CACJ,MAAM;CAEN,MAAM,MAAM,WAA2D;EACrE,OAAO,SAAS,SAAS;CAC3B;CAEA,MAAM,aAAa,aAA0D;EAC3E,OAAO,gBAAgB,YAAY,SAAS,KAAA,GAAW,YAAY,OAA6B;CAClG;CAEA,UAAU,aAAuC;EAC/C,OAAO,YAAY;CACrB;CAEA,gBAAgB,aAA4D;EAC1E,OAAO,QAAQ,QAAQ,iBAAiB,YAAY,OAA6B,CAAC;CACpF;;;;;CAMA,mBAAmB,aAAmD;EACpE,OAAO,iBAAiB,YAAY,OAA6B;CACnE;AACF"}
+{"version":3,"file":"xai.js","names":[],"sources":["../../../src/auth/providers/xai.ts"],"sourcesContent":["/**\n * xAI OAuth flow (Grok)\n *\n * Ported from pi-mono's xAI OAuth implementation:\n * https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/xai.ts\n *\n * xAI uses a standard RFC 8628 device authorization grant, so the flow needs\n * no inbound connection to the server. The primitives are split into\n * `startXAIDeviceLogin()` / `pollXAIDeviceLogin()` so web routes can persist\n * the JSON-serializable pending state between HTTP requests; the blocking\n * `loginXAI()` wraps them for TUI use.\n */\n\nimport { createDeviceCodePollState, pollDeviceCodeUntilComplete, stepDeviceCodePoll } from '../device-code.js';\nimport type { DeviceCodePollOutcome, DeviceCodePollState } from '../device-code.js';\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';\n\nconst CLIENT_ID = 'b1a00492-073a-47ea-816f-4c329264a828';\nconst DEVICE_CODE_URL = 'https://auth.x.ai/oauth2/device/code';\nconst TOKEN_URL = 'https://auth.x.ai/oauth2/token';\nconst SCOPE = 'openid profile email offline_access grok-cli:access api:access';\nconst DEVICE_CODE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:device_code';\nconst DEFAULT_TOKEN_EXPIRES_IN_SECONDS = 3600;\nconst REQUEST_TIMEOUT_MS = 30_000;\n// Refresh 5 minutes before actual expiry (same skew as Anthropic).\nconst REFRESH_SKEW_MS = 5 * 60 * 1000;\n\nasync function postForm(url: string, params: Record<string, string>, signal?: AbortSignal): Promise<Response> {\n  const timeoutSignal = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return fetch(url, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n    body: new URLSearchParams(params).toString(),\n    signal: signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal,\n  });\n}\n\n/** The verification URI is opened by the user; only accept https URLs. */\nfunction validateVerificationUri(raw: string): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    throw new Error('xAI device authorization returned an invalid verification_uri');\n  }\n  if (parsed.protocol !== 'https:') {\n    throw new Error('xAI device authorization returned a non-https verification_uri');\n  }\n  return parsed.toString();\n}\n\nfunction credentialsFromTokenResponse(\n  data: unknown,\n  previousRefreshToken?: string,\n  previousIdToken?: string,\n): OAuthCredentials {\n  const record = (data ?? {}) as Record<string, unknown>;\n  const access = record.access_token;\n  if (typeof access !== 'string' || access.length === 0) {\n    throw new Error('xAI token response missing access_token');\n  }\n\n  // xAI may not rotate the refresh token on refresh; keep the previous one.\n  const refresh =\n    typeof record.refresh_token === 'string' && record.refresh_token.length > 0\n      ? record.refresh_token\n      : previousRefreshToken;\n  if (!refresh) {\n    throw new Error('xAI token response missing refresh_token');\n  }\n\n  const expiresIn =\n    typeof record.expires_in === 'number' && record.expires_in > 0\n      ? record.expires_in\n      : DEFAULT_TOKEN_EXPIRES_IN_SECONDS;\n\n  return {\n    access,\n    refresh,\n    expires: Date.now() + expiresIn * 1000 - REFRESH_SKEW_MS,\n    // Kept so the account label can resolve the email claim later; xAI's\n    // refresh responses re-issue it, and the previous one is carried forward\n    // when they don't.\n    idToken: typeof record.id_token === 'string' && record.id_token.length > 0 ? record.id_token : previousIdToken,\n  };\n}\n\n/**\n * Serializable pending state for an xAI device-code login. Safe to persist\n * (e.g. a `pending jsonb` column) so polling can span HTTP requests.\n */\nexport interface XAIDeviceLoginPending {\n  deviceCode: string;\n  userCode: string;\n  /** Verification URL for the user to open (https-only, validated). */\n  url: string;\n  instructions: string;\n  /** RFC 8628 poll-loop state (interval growth, deadline, slow_down count). */\n  state: DeviceCodePollState;\n}\n\nexport type XAIDevicePollResult =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending: XAIDeviceLoginPending }\n  | { status: 'failed'; error: string };\n\n/**\n * Start an xAI device-code login: request a user code and return the\n * serializable pending state for subsequent polls.\n */\nexport async function startXAIDeviceLogin(options?: { signal?: AbortSignal }): Promise<XAIDeviceLoginPending> {\n  const response = await postForm(DEVICE_CODE_URL, { client_id: CLIENT_ID, scope: SCOPE }, options?.signal);\n\n  if (!response.ok) {\n    throw new Error(`Failed to initiate xAI device authorization: ${response.status}`);\n  }\n\n  const data = (await response.json()) as {\n    device_code?: string;\n    user_code?: string;\n    verification_uri?: string;\n    verification_uri_complete?: string;\n    interval?: number;\n    expires_in?: number;\n  };\n\n  if (!data.device_code || !data.user_code || !data.verification_uri) {\n    throw new Error('xAI device authorization response missing required fields');\n  }\n\n  const url = validateVerificationUri(data.verification_uri_complete ?? data.verification_uri);\n\n  return {\n    deviceCode: data.device_code,\n    userCode: data.user_code,\n    url,\n    instructions: `Enter code: ${data.user_code}`,\n    state: createDeviceCodePollState({\n      intervalSeconds: data.interval,\n      expiresInSeconds: typeof data.expires_in === 'number' && data.expires_in > 0 ? data.expires_in : 600,\n    }),\n  };\n}\n\nasync function pollXAITokenOnce(\n  pending: XAIDeviceLoginPending,\n  signal?: AbortSignal,\n): Promise<DeviceCodePollOutcome<OAuthCredentials>> {\n  const response = await postForm(\n    TOKEN_URL,\n    {\n      grant_type: DEVICE_CODE_GRANT_TYPE,\n      device_code: pending.deviceCode,\n      client_id: CLIENT_ID,\n    },\n    signal,\n  );\n\n  if (response.ok) {\n    const data = (await response.json()) as unknown;\n    try {\n      return { status: 'complete', result: credentialsFromTokenResponse(data) };\n    } catch (error) {\n      return { status: 'failed', error: error instanceof Error ? error.message : String(error) };\n    }\n  }\n\n  const text = await response.text().catch(() => '');\n  let body: { error?: string; interval?: number } = {};\n  try {\n    body = JSON.parse(text) as { error?: string; interval?: number };\n  } catch {\n    // Non-JSON upstream bodies are intentionally omitted from user-visible errors.\n  }\n\n  switch (body.error) {\n    case 'authorization_pending':\n      return { status: 'pending', intervalSeconds: body.interval };\n    case 'slow_down':\n      return { status: 'slow_down', intervalSeconds: body.interval };\n    case 'access_denied':\n    case 'authorization_denied':\n      return { status: 'failed', error: 'xAI authorization was denied' };\n    case 'expired_token':\n      return { status: 'failed', error: 'xAI device code expired before authorization completed' };\n    default:\n      // Status only: `body.error` is untrusted upstream text (RFC 6749 does not\n      // constrain it), so echoing it would render provider-controlled content\n      // in the TUI. The known flow codes above are handled explicitly.\n      return {\n        status: 'failed',\n        error: `xAI device authorization failed: ${response.status}`,\n      };\n  }\n}\n\n/**\n * Perform exactly one upstream poll for a pending xAI device login.\n * Returns the updated pending state so callers (e.g. web routes) can persist\n * slow_down interval growth between polls. Never throws for flow-level\n * conditions.\n */\nexport async function pollXAIDeviceLogin(\n  pending: XAIDeviceLoginPending,\n  options?: { signal?: AbortSignal },\n): Promise<XAIDevicePollResult> {\n  const step = await stepDeviceCodePoll(pending.state, () => pollXAITokenOnce(pending, options?.signal));\n\n  switch (step.status) {\n    case 'complete':\n      return { status: 'complete', credentials: step.result };\n    case 'failed':\n      return { status: 'failed', error: step.error };\n    case 'pending':\n    case 'slow_down':\n      return {\n        status: 'pending',\n        nextPollMs: step.nextPollMs,\n        pending: { ...pending, state: step.state },\n      };\n  }\n}\n\n/**\n * Login with xAI OAuth (device-code flow), blocking until authorized.\n */\nexport async function loginXAI(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const pending = await startXAIDeviceLogin({ signal: callbacks.signal });\n\n  callbacks.onAuth({ url: pending.url, instructions: pending.instructions, userCode: pending.userCode });\n  callbacks.onProgress?.('Waiting for xAI device authorization...');\n\n  return pollDeviceCodeUntilComplete({\n    state: pending.state,\n    pollOnce: () => pollXAITokenOnce(pending, callbacks.signal),\n    signal: callbacks.signal,\n  });\n}\n\n/**\n * Refresh xAI OAuth token\n */\nexport async function refreshXAIToken(\n  refreshToken: string,\n  signal?: AbortSignal,\n  previousIdToken?: string,\n): Promise<OAuthCredentials> {\n  const response = await postForm(\n    TOKEN_URL,\n    {\n      grant_type: 'refresh_token',\n      client_id: CLIENT_ID,\n      refresh_token: refreshToken,\n    },\n    signal,\n  );\n\n  if (!response.ok) {\n    throw new Error(`xAI token refresh failed: ${response.status}`);\n  }\n\n  return credentialsFromTokenResponse((await response.json()) as unknown, refreshToken, previousIdToken);\n}\n\n/** Decode the email claim out of an id_token JWT payload (no verification). */\nfunction emailFromIdToken(idToken: string | undefined): string | undefined {\n  if (typeof idToken !== 'string') return undefined;\n  const parts = idToken.split('.');\n  if (parts.length !== 3) return undefined;\n  try {\n    const padded = (parts[1] ?? '').replace(/-/g, '+').replace(/_/g, '/');\n    const json = JSON.parse(Buffer.from(padded, 'base64').toString('utf8')) as { email?: unknown };\n    return typeof json.email === 'string' && json.email.length > 0 ? json.email : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport const xaiOAuthProvider: OAuthProviderInterface = {\n  id: 'xai',\n  name: 'xAI (Grok)',\n\n  async login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n    return loginXAI(callbacks);\n  },\n\n  async refreshToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {\n    return refreshXAIToken(credentials.refresh, undefined, credentials.idToken as string | undefined);\n  },\n\n  getApiKey(credentials: OAuthCredentials): string {\n    return credentials.access;\n  },\n\n  getAccountLabel(credentials: OAuthCredentials): Promise<string | undefined> {\n    return Promise.resolve(emailFromIdToken(credentials.idToken as string | undefined));\n  },\n\n  /**\n   * The account's email, read from the id token — one subscription per email,\n   * so this distinguishes two xAI accounts from a re-authorization of one.\n   */\n  getAccountIdentity(credentials: OAuthCredentials): string | undefined {\n    return emailFromIdToken(credentials.idToken as string | undefined);\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;AAiBA,MAAM,YAAY;AAClB,MAAM,kBAAkB;AACxB,MAAM,YAAY;AAClB,MAAM,QAAQ;AACd,MAAM,yBAAyB;AAC/B,MAAM,mCAAmC;AACzC,MAAM,qBAAqB;AAE3B,MAAM,kBAAkB,MAAS;AAEjC,eAAe,SAAS,KAAa,QAAgC,QAAyC;CAC5G,MAAM,gBAAgB,YAAY,QAAQ,kBAAkB;CAC5D,OAAO,MAAM,KAAK;EAChB,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D,MAAM,IAAI,gBAAgB,MAAM,CAAC,CAAC,SAAS;EAC3C,QAAQ,SAAS,YAAY,IAAI,CAAC,QAAQ,aAAa,CAAC,IAAI;CAC9D,CAAC;AACH;;AAGA,SAAS,wBAAwB,KAAqB;CACpD,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,+DAA+D;CACjF;CACA,IAAI,OAAO,aAAa,UACtB,MAAM,IAAI,MAAM,gEAAgE;CAElF,OAAO,OAAO,SAAS;AACzB;AAEA,SAAS,6BACP,MACA,sBACA,iBACkB;CAClB,MAAM,SAAU,QAAQ,CAAC;CACzB,MAAM,SAAS,OAAO;CACtB,IAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAClD,MAAM,IAAI,MAAM,yCAAyC;CAI3D,MAAM,UACJ,OAAO,OAAO,kBAAkB,YAAY,OAAO,cAAc,SAAS,IACtE,OAAO,gBACP;CACN,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,MAAM,YACJ,OAAO,OAAO,eAAe,YAAY,OAAO,aAAa,IACzD,OAAO,aACP;CAEN,OAAO;EACL;EACA;EACA,SAAS,KAAK,IAAI,IAAI,YAAY,MAAO;EAIzC,SAAS,OAAO,OAAO,aAAa,YAAY,OAAO,SAAS,SAAS,IAAI,OAAO,WAAW;CACjG;AACF;;;;;AAyBA,eAAsB,oBAAoB,SAAoE;CAC5G,MAAM,WAAW,MAAM,SAAS,iBAAiB;EAAE,WAAW;EAAW,OAAO;CAAM,GAAG,SAAS,MAAM;CAExG,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,gDAAgD,SAAS,QAAQ;CAGnF,MAAM,OAAQ,MAAM,SAAS,KAAK;CASlC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,aAAa,CAAC,KAAK,kBAChD,MAAM,IAAI,MAAM,2DAA2D;CAG7E,MAAM,MAAM,wBAAwB,KAAK,6BAA6B,KAAK,gBAAgB;CAE3F,OAAO;EACL,YAAY,KAAK;EACjB,UAAU,KAAK;EACf;EACA,cAAc,eAAe,KAAK;EAClC,OAAO,0BAA0B;GAC/B,iBAAiB,KAAK;GACtB,kBAAkB,OAAO,KAAK,eAAe,YAAY,KAAK,aAAa,IAAI,KAAK,aAAa;EACnG,CAAC;CACH;AACF;AAEA,eAAe,iBACb,SACA,QACkD;CAClD,MAAM,WAAW,MAAM,SACrB,WACA;EACE,YAAY;EACZ,aAAa,QAAQ;EACrB,WAAW;CACb,GACA,MACF;CAEA,IAAI,SAAS,IAAI;EACf,MAAM,OAAQ,MAAM,SAAS,KAAK;EAClC,IAAI;GACF,OAAO;IAAE,QAAQ;IAAY,QAAQ,6BAA6B,IAAI;GAAE;EAC1E,SAAS,OAAO;GACd,OAAO;IAAE,QAAQ;IAAU,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAAE;EAC3F;CACF;CAEA,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;CACjD,IAAI,OAA8C,CAAC;CACnD,IAAI;EACF,OAAO,KAAK,MAAM,IAAI;CACxB,QAAQ,CAER;CAEA,QAAQ,KAAK,OAAb;EACE,KAAK,yBACH,OAAO;GAAE,QAAQ;GAAW,iBAAiB,KAAK;EAAS;EAC7D,KAAK,aACH,OAAO;GAAE,QAAQ;GAAa,iBAAiB,KAAK;EAAS;EAC/D,KAAK;EACL,KAAK,wBACH,OAAO;GAAE,QAAQ;GAAU,OAAO;EAA+B;EACnE,KAAK,iBACH,OAAO;GAAE,QAAQ;GAAU,OAAO;EAAyD;EAC7F,SAIE,OAAO;GACL,QAAQ;GACR,OAAO,oCAAoC,SAAS;EACtD;CACJ;AACF;;;;;;;AAQA,eAAsB,mBACpB,SACA,SAC8B;CAC9B,MAAM,OAAO,MAAM,mBAAmB,QAAQ,aAAa,iBAAiB,SAAS,SAAS,MAAM,CAAC;CAErG,QAAQ,KAAK,QAAb;EACE,KAAK,YACH,OAAO;GAAE,QAAQ;GAAY,aAAa,KAAK;EAAO;EACxD,KAAK,UACH,OAAO;GAAE,QAAQ;GAAU,OAAO,KAAK;EAAM;EAC/C,KAAK;EACL,KAAK,aACH,OAAO;GACL,QAAQ;GACR,YAAY,KAAK;GACjB,SAAS;IAAE,GAAG;IAAS,OAAO,KAAK;GAAM;EAC3C;CACJ;AACF;;;;AAKA,eAAsB,SAAS,WAA2D;CACxF,MAAM,UAAU,MAAM,oBAAoB,EAAE,QAAQ,UAAU,OAAO,CAAC;CAEtE,UAAU,OAAO;EAAE,KAAK,QAAQ;EAAK,cAAc,QAAQ;EAAc,UAAU,QAAQ;CAAS,CAAC;CACrG,UAAU,aAAa,yCAAyC;CAEhE,OAAO,4BAA4B;EACjC,OAAO,QAAQ;EACf,gBAAgB,iBAAiB,SAAS,UAAU,MAAM;EAC1D,QAAQ,UAAU;CACpB,CAAC;AACH;;;;AAKA,eAAsB,gBACpB,cACA,QACA,iBAC2B;CAC3B,MAAM,WAAW,MAAM,SACrB,WACA;EACE,YAAY;EACZ,WAAW;EACX,eAAe;CACjB,GACA,MACF;CAEA,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,6BAA6B,SAAS,QAAQ;CAGhE,OAAO,6BAA8B,MAAM,SAAS,KAAK,GAAe,cAAc,eAAe;AACvG;;AAGA,SAAS,iBAAiB,SAAiD;CACzE,IAAI,OAAO,YAAY,UAAU,OAAO,KAAA;CACxC,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,GAAG,OAAO,KAAA;CAC/B,IAAI;EACF,MAAM,UAAU,MAAM,MAAM,GAAA,CAAI,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;EACpE,MAAM,OAAO,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC;EACtE,OAAO,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ,KAAA;CAChF,QAAQ;EACN;CACF;AACF;AAEA,MAAa,mBAA2C;CACtD,IAAI;CACJ,MAAM;CAEN,MAAM,MAAM,WAA2D;EACrE,OAAO,SAAS,SAAS;CAC3B;CAEA,MAAM,aAAa,aAA0D;EAC3E,OAAO,gBAAgB,YAAY,SAAS,KAAA,GAAW,YAAY,OAA6B;CAClG;CAEA,UAAU,aAAuC;EAC/C,OAAO,YAAY;CACrB;CAEA,gBAAgB,aAA4D;EAC1E,OAAO,QAAQ,QAAQ,iBAAiB,YAAY,OAA6B,CAAC;CACpF;;;;;CAMA,mBAAmB,aAAmD;EACpE,OAAO,iBAAiB,YAAY,OAA6B;CACnE;AACF"}

package/dist/auth/storage.js

@@ -5,8 +5,8 @@ import { kimiCodingOAuthProvider } from "./providers/kimi-coding.js";
 import { openaiCodexOAuthProvider } from "./providers/openai-codex.js";
 import { xaiOAuthProvider } from "./providers/xai.js";
 import { dirname, join } from "path";
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "fs";
 import { createHash } from "crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "fs";
 //#region src/auth/storage.ts
 /**
 * Credential storage for API keys and OAuth tokens.

package/dist/auth/types.d.ts

@@ -11,6 +11,7 @@ export type OAuthProviderId = string;
 export interface OAuthAuthInfo {
     url: string;
     instructions?: string;
+    userCode?: string;
 }
 export interface OAuthPrompt {
     message: string;

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;IACtC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,gFAAgF;IAChF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAEtC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE7C,wDAAwD;IACxD,KAAK,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEjE,yEAAyE;IACzE,YAAY,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEvE,6DAA6D;IAC7D,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAAC;IAEjD;;;OAGG;IACH,eAAe,CAAC,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE7E;;;;;;;;;OASG;IACH,kBAAkB,CAAC,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAAC;CACxE;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf,GAAG,gBAAgB,CAAC;AAErB,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG;IACtD,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAAC,CAAC;AAElF;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,yEAAyE;IACzE,MAAM,IAAI,IAAI,CAAC;IACf,+EAA+E;IAC/E,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAClD,uDAAuD;IACvD,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrF;;;;OAIG;IACH,kBAAkB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAEhH;;;OAGG;IACH,YAAY,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAExD,kEAAkE;IAClE,gBAAgB,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAEtE;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAE1F,mFAAmF;IACnF,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;IACtC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,gFAAgF;IAChF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAEtC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE7C,wDAAwD;IACxD,KAAK,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEjE,yEAAyE;IACzE,YAAY,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEvE,6DAA6D;IAC7D,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAAC;IAEjD;;;OAGG;IACH,eAAe,CAAC,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE7E;;;;;;;;;OASG;IACH,kBAAkB,CAAC,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAAC;CACxE;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf,GAAG,gBAAgB,CAAC;AAErB,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG;IACtD,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAAC,CAAC;AAElF;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,yEAAyE;IACzE,MAAM,IAAI,IAAI,CAAC;IACf,+EAA+E;IAC/E,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAClD,uDAAuD;IACvD,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrF;;;;OAIG;IACH,kBAAkB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAEhH;;;OAGG;IACH,YAAY,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAExD,kEAAkE;IAClE,gBAAgB,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAEtE;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAE1F,mFAAmF;IACnF,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9D"}

package/dist/clipboard/index.js

@@ -1,6 +1,6 @@
 import { join } from "path";
-import { execSync } from "child_process";
 import { readFileSync, unlinkSync } from "fs";
+import { execSync } from "child_process";
 import { tmpdir } from "os";
 //#region src/clipboard/index.ts
 /**

package/dist/index.js

@@ -2,9 +2,10 @@ import { validateConfigDirName } from "./constants.js";
 import { detectProject, getObservabilityDatabasePath, getResourceIdOverride, getStorageConfig } from "./utils/project.js";
 import { isKimiCodingDeviceId } from "./auth/providers/kimi-coding.js";
 import { AuthStorage } from "./auth/storage.js";
-import { setAuthStorage } from "./providers/openai-codex.js";
 import { getAvailableModePacks, getAvailableOmPacks, selectPreferredOMPack } from "./onboarding/packs.js";
+import { setAuthStorage } from "./providers/openai-codex.js";
 import { MASTRA_GATEWAY_PROVIDER, OBSERVABILITY_AUTH_PREFIX, THREAD_ACTIVE_MODEL_PACK_ID_KEY, loadSettings, resolveModelDefaults, resolveOmRoleModel, saveSettings } from "./onboarding/settings.js";
+import { hasExplicitOMConfiguration } from "./onboarding/om-settings.js";
 import { resolveExperimentalAgent, validateExperimentalAgent, wrapExperimentalAgent } from "./experimental-agent.js";
 import { createSessionThreadAdvertisement } from "./agent-connections/session-advertisement.js";
 import { AgentConnectionsSignalProvider } from "./agent-connections/signal-provider.js";
@@ -39,7 +40,6 @@ import "./hooks/index.js";
 import { KnowledgeInspectorError, createKnowledgeInspector } from "./knowledge-inspector.js";
 import { createMcpManager } from "./mcp/manager.js";
 import "./mcp/index.js";
-import { hasExplicitOMConfiguration } from "./onboarding/om-settings.js";
 import { getToolCategory } from "./permissions.js";
 import { PluginManager } from "./plugins/manager.js";
 import { PluginSignalLane } from "./plugins/signal-lane.js";
@@ -66,9 +66,9 @@ import { formatHuman, formatJsonl, renderJsonResult, renderTextResult } from "./
 import { hasHeadlessFlag, runMCCli } from "./headless/cli.js";
 import "./headless/index.js";
 import path from "path";
+import { createHash, randomUUID } from "crypto";
 import { statSync } from "fs";
 import { homedir, hostname } from "os";
-import { createHash, randomUUID } from "crypto";
 import { readFile } from "fs/promises";
 import { AgentController } from "@mastra/core/agent-controller";
 import { createCodingAgent } from "@mastra/core/coding-agent";

package/dist/lsp/server.js

@@ -1,8 +1,8 @@
 import { getLanguageId } from "./language.js";
 import { createRequire } from "module";
 import path, { join } from "path";
-import { spawn } from "child_process";
 import { existsSync } from "fs";
+import { spawn } from "child_process";
 import { pathToFileURL } from "url";
 //#region src/lsp/server.ts
 /**

package/dist/onboarding/om-settings.d.ts

@@ -9,6 +9,7 @@ import type { GlobalSettings } from './settings.js';
 export declare function hasExplicitOMConfiguration(settings: GlobalSettings): boolean;
 /** Seed a built-in OM pack unless the user already chose one; true when settings changed. */
 export declare function applyOMDefaultIfUnconfigured(settings: GlobalSettings, pack: OMPack): boolean;
+export declare function seedProviderOMDefault(providerId: string): OMPack | undefined;
 /**
  * Apply a role-specific OM model override to an in-memory `GlobalSettings`.
  *

package/dist/onboarding/om-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"om-settings.d.ts","sourceRoot":"","sources":["../../src/onboarding/om-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,0EAA0E;AAC1E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAO5E;AAED,6FAA6F;AAC7F,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAO5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,UAAU,GAAG,WAAW,EAC9B,OAAO,EAAE,MAAM,EACf,uBAAuB,EAAE,MAAM,GAAG,IAAI,GACrC,IAAI,CAgBN;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAIzE"}
+{"version":3,"file":"om-settings.d.ts","sourceRoot":"","sources":["../../src/onboarding/om-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,0EAA0E;AAC1E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAO5E;AAED,6FAA6F;AAC7F,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAO5F;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,UAAU,GAAG,WAAW,EAC9B,OAAO,EAAE,MAAM,EACf,uBAAuB,EAAE,MAAM,GAAG,IAAI,GACrC,IAAI,CAgBN;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAIzE"}

package/dist/onboarding/om-settings.js

@@ -1,3 +1,4 @@
+import { resolveProviderOMDefault } from "./packs.js";
 import { loadSettings, saveSettings } from "./settings.js";
 //#region src/onboarding/om-settings.ts
 /** Whether the user has already chosen any persisted OM model or pack. */
@@ -14,6 +15,14 @@ function applyOMDefaultIfUnconfigured(settings, pack) {
 	settings.models.omModelOverride = null;
 	return true;
 }
+function seedProviderOMDefault(providerId) {
+	const pack = resolveProviderOMDefault(providerId);
+	if (pack.id === "custom") return void 0;
+	const settings = loadSettings();
+	if (!applyOMDefaultIfUnconfigured(settings, pack)) return void 0;
+	saveSettings(settings);
+	return pack;
+}
 /**
 * Apply a role-specific OM model override to an in-memory `GlobalSettings`.
 *
@@ -42,6 +51,6 @@ function persistOmObserveAttachments(value) {
 	saveSettings(settings);
 }
 //#endregion
-export { applyOMDefaultIfUnconfigured, applyOmRoleOverride, hasExplicitOMConfiguration, persistOmObserveAttachments };
+export { applyOMDefaultIfUnconfigured, applyOmRoleOverride, hasExplicitOMConfiguration, persistOmObserveAttachments, seedProviderOMDefault };
 
 //# sourceMappingURL=om-settings.js.map

package/dist/onboarding/om-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"om-settings.js","names":[],"sources":["../../src/onboarding/om-settings.ts"],"sourcesContent":["/**\n * Pure `GlobalSettings` mutation helpers for observational-memory (OM)\n * configuration. Shared by the TUI `/om` command and the web settings\n * routes — no UI dependencies.\n */\nimport type { OMPack } from './packs.js';\nimport type { GlobalSettings } from './settings.js';\nimport { loadSettings, saveSettings } from './settings.js';\n\n/** Whether the user has already chosen any persisted OM model or pack. */\nexport function hasExplicitOMConfiguration(settings: GlobalSettings): boolean {\n  const { activeOmPackId, omModelOverride, observerModelOverride, reflectorModelOverride } = settings.models;\n  if (omModelOverride || observerModelOverride || reflectorModelOverride) return true;\n\n  // 'custom' without a model is what onboarding persists when no provider was\n  // reachable — a forced non-choice, not a preference worth preserving.\n  return [settings.onboarding.omPackId, activeOmPackId].some(packId => packId && packId !== 'custom');\n}\n\n/** Seed a built-in OM pack unless the user already chose one; true when settings changed. */\nexport function applyOMDefaultIfUnconfigured(settings: GlobalSettings, pack: OMPack): boolean {\n  if (hasExplicitOMConfiguration(settings)) return false;\n\n  settings.onboarding.omPackId = pack.id;\n  settings.models.activeOmPackId = pack.id;\n  settings.models.omModelOverride = null;\n  return true;\n}\n\n/**\n * Apply a role-specific OM model override to an in-memory `GlobalSettings`.\n *\n * When switching `activeOmPackId` from a built-in pack to `'custom'` we also\n * snapshot the *other* role's currently-resolved model into its override\n * field. Without this, the other role would silently lose its model on next\n * startup because `resolveOmRoleModel` would no longer resolve it from the\n * (now-overridden) pack.\n *\n * Exported for unit testing; `persistOmRoleOverride` is the disk-backed wrapper.\n */\nexport function applyOmRoleOverride(\n  settings: GlobalSettings,\n  role: 'observer' | 'reflector',\n  modelId: string,\n  otherRoleCurrentModelId: string | null,\n): void {\n  const wasBuiltinPack = settings.models.activeOmPackId !== null && settings.models.activeOmPackId !== 'custom';\n\n  if (role === 'observer') {\n    if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.reflectorModelOverride) {\n      settings.models.reflectorModelOverride = otherRoleCurrentModelId;\n    }\n    settings.models.observerModelOverride = modelId;\n  } else {\n    if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.observerModelOverride) {\n      settings.models.observerModelOverride = otherRoleCurrentModelId;\n    }\n    settings.models.reflectorModelOverride = modelId;\n  }\n\n  settings.models.activeOmPackId = 'custom';\n}\n\nexport function persistOmObserveAttachments(value: 'auto' | boolean): void {\n  const settings = loadSettings();\n  settings.models.omObserveAttachments = value;\n  saveSettings(settings);\n}\n"],"mappings":";;;AAUA,SAAgB,2BAA2B,UAAmC;CAC5E,MAAM,EAAE,gBAAgB,iBAAiB,uBAAuB,2BAA2B,SAAS;CACpG,IAAI,mBAAmB,yBAAyB,wBAAwB,OAAO;CAI/E,OAAO,CAAC,SAAS,WAAW,UAAU,cAAc,CAAC,CAAC,MAAK,WAAU,UAAU,WAAW,QAAQ;AACpG;;AAGA,SAAgB,6BAA6B,UAA0B,MAAuB;CAC5F,IAAI,2BAA2B,QAAQ,GAAG,OAAO;CAEjD,SAAS,WAAW,WAAW,KAAK;CACpC,SAAS,OAAO,iBAAiB,KAAK;CACtC,SAAS,OAAO,kBAAkB;CAClC,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,oBACd,UACA,MACA,SACA,yBACM;CACN,MAAM,iBAAiB,SAAS,OAAO,mBAAmB,QAAQ,SAAS,OAAO,mBAAmB;CAErG,IAAI,SAAS,YAAY;EACvB,IAAI,kBAAkB,2BAA2B,CAAC,SAAS,OAAO,wBAChE,SAAS,OAAO,yBAAyB;EAE3C,SAAS,OAAO,wBAAwB;CAC1C,OAAO;EACL,IAAI,kBAAkB,2BAA2B,CAAC,SAAS,OAAO,uBAChE,SAAS,OAAO,wBAAwB;EAE1C,SAAS,OAAO,yBAAyB;CAC3C;CAEA,SAAS,OAAO,iBAAiB;AACnC;AAEA,SAAgB,4BAA4B,OAA+B;CACzE,MAAM,WAAW,aAAa;CAC9B,SAAS,OAAO,uBAAuB;CACvC,aAAa,QAAQ;AACvB"}
+{"version":3,"file":"om-settings.js","names":[],"sources":["../../src/onboarding/om-settings.ts"],"sourcesContent":["/**\n * Pure `GlobalSettings` mutation helpers for observational-memory (OM)\n * configuration. Shared by the TUI `/om` command and the web settings\n * routes — no UI dependencies.\n */\nimport type { OMPack } from './packs.js';\nimport { resolveProviderOMDefault } from './packs.js';\nimport type { GlobalSettings } from './settings.js';\nimport { loadSettings, saveSettings } from './settings.js';\n\n/** Whether the user has already chosen any persisted OM model or pack. */\nexport function hasExplicitOMConfiguration(settings: GlobalSettings): boolean {\n  const { activeOmPackId, omModelOverride, observerModelOverride, reflectorModelOverride } = settings.models;\n  if (omModelOverride || observerModelOverride || reflectorModelOverride) return true;\n\n  // 'custom' without a model is what onboarding persists when no provider was\n  // reachable — a forced non-choice, not a preference worth preserving.\n  return [settings.onboarding.omPackId, activeOmPackId].some(packId => packId && packId !== 'custom');\n}\n\n/** Seed a built-in OM pack unless the user already chose one; true when settings changed. */\nexport function applyOMDefaultIfUnconfigured(settings: GlobalSettings, pack: OMPack): boolean {\n  if (hasExplicitOMConfiguration(settings)) return false;\n\n  settings.onboarding.omPackId = pack.id;\n  settings.models.activeOmPackId = pack.id;\n  settings.models.omModelOverride = null;\n  return true;\n}\n\nexport function seedProviderOMDefault(providerId: string): OMPack | undefined {\n  const pack = resolveProviderOMDefault(providerId);\n  // No cheap OM pack for this provider — leave OM open for a later login rather\n  // than pinning observation and reflection to a full-size coding model.\n  if (pack.id === 'custom') return undefined;\n\n  const settings = loadSettings();\n  if (!applyOMDefaultIfUnconfigured(settings, pack)) return undefined;\n\n  saveSettings(settings);\n  return pack;\n}\n\n/**\n * Apply a role-specific OM model override to an in-memory `GlobalSettings`.\n *\n * When switching `activeOmPackId` from a built-in pack to `'custom'` we also\n * snapshot the *other* role's currently-resolved model into its override\n * field. Without this, the other role would silently lose its model on next\n * startup because `resolveOmRoleModel` would no longer resolve it from the\n * (now-overridden) pack.\n *\n * Exported for unit testing; `persistOmRoleOverride` is the disk-backed wrapper.\n */\nexport function applyOmRoleOverride(\n  settings: GlobalSettings,\n  role: 'observer' | 'reflector',\n  modelId: string,\n  otherRoleCurrentModelId: string | null,\n): void {\n  const wasBuiltinPack = settings.models.activeOmPackId !== null && settings.models.activeOmPackId !== 'custom';\n\n  if (role === 'observer') {\n    if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.reflectorModelOverride) {\n      settings.models.reflectorModelOverride = otherRoleCurrentModelId;\n    }\n    settings.models.observerModelOverride = modelId;\n  } else {\n    if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.observerModelOverride) {\n      settings.models.observerModelOverride = otherRoleCurrentModelId;\n    }\n    settings.models.reflectorModelOverride = modelId;\n  }\n\n  settings.models.activeOmPackId = 'custom';\n}\n\nexport function persistOmObserveAttachments(value: 'auto' | boolean): void {\n  const settings = loadSettings();\n  settings.models.omObserveAttachments = value;\n  saveSettings(settings);\n}\n"],"mappings":";;;;AAWA,SAAgB,2BAA2B,UAAmC;CAC5E,MAAM,EAAE,gBAAgB,iBAAiB,uBAAuB,2BAA2B,SAAS;CACpG,IAAI,mBAAmB,yBAAyB,wBAAwB,OAAO;CAI/E,OAAO,CAAC,SAAS,WAAW,UAAU,cAAc,CAAC,CAAC,MAAK,WAAU,UAAU,WAAW,QAAQ;AACpG;;AAGA,SAAgB,6BAA6B,UAA0B,MAAuB;CAC5F,IAAI,2BAA2B,QAAQ,GAAG,OAAO;CAEjD,SAAS,WAAW,WAAW,KAAK;CACpC,SAAS,OAAO,iBAAiB,KAAK;CACtC,SAAS,OAAO,kBAAkB;CAClC,OAAO;AACT;AAEA,SAAgB,sBAAsB,YAAwC;CAC5E,MAAM,OAAO,yBAAyB,UAAU;CAGhD,IAAI,KAAK,OAAO,UAAU,OAAO,KAAA;CAEjC,MAAM,WAAW,aAAa;CAC9B,IAAI,CAAC,6BAA6B,UAAU,IAAI,GAAG,OAAO,KAAA;CAE1D,aAAa,QAAQ;CACrB,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,oBACd,UACA,MACA,SACA,yBACM;CACN,MAAM,iBAAiB,SAAS,OAAO,mBAAmB,QAAQ,SAAS,OAAO,mBAAmB;CAErG,IAAI,SAAS,YAAY;EACvB,IAAI,kBAAkB,2BAA2B,CAAC,SAAS,OAAO,wBAChE,SAAS,OAAO,yBAAyB;EAE3C,SAAS,OAAO,wBAAwB;CAC1C,OAAO;EACL,IAAI,kBAAkB,2BAA2B,CAAC,SAAS,OAAO,uBAChE,SAAS,OAAO,wBAAwB;EAE1C,SAAS,OAAO,yBAAyB;CAC3C;CAEA,SAAS,OAAO,iBAAiB;AACnC;AAEA,SAAgB,4BAA4B,OAA+B;CACzE,MAAM,WAAW,aAAa;CAC9B,SAAS,OAAO,uBAAuB;CACvC,aAAa,QAAQ;AACvB"}

package/dist/onboarding/settings.js

@@ -1,10 +1,10 @@
-import { THINKING_LEVEL_VALUES, isThinkingLevelSetting, resolveDefaultThinkingLevel as resolveDefaultThinkingLevel$1 } from "../thinking.js";
 import { getAppDataDir } from "../utils/project.js";
 import { AuthStorage, PROVIDER_DEFAULT_MODELS } from "../auth/storage.js";
+import { pruneUnknownModePackFallbacks, pruneUnknownPackAccountPreferences } from "./packs.js";
 import { OPENAI_PREFIX, normalizeAnthropicModelId, remapOpenAIModelForCodexOAuth, stripMastraGatewayPrefix } from "../providers/model-ids.js";
+import { THINKING_LEVEL_VALUES, isThinkingLevelSetting, resolveDefaultThinkingLevel as resolveDefaultThinkingLevel$1 } from "../thinking.js";
 import { buildCodexStagehandFetch, createCodexMiddleware } from "../providers/openai-codex.js";
 import { DEFAULT_STT_PROVIDER, resolveSTTModel } from "../voice/stt-registry.js";
-import { pruneUnknownModePackFallbacks, pruneUnknownPackAccountPreferences } from "./packs.js";
 import { dirname, join } from "path";
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 //#region src/onboarding/settings.ts

package/dist/providers/openai-codex.js

@@ -1,6 +1,6 @@
-import { supportsMaxReasoningEffort } from "../thinking.js";
 import { AuthStorage } from "../auth/storage.js";
 import { ProviderAuthRequiredError } from "../auth/provider-auth-error.js";
+import { supportsMaxReasoningEffort } from "../thinking.js";
 import { createOpenAI } from "@ai-sdk/openai";
 import { wrapLanguageModel } from "ai";
 //#region src/providers/openai-codex.ts

package/dist/schedules/run-script.js

@@ -1,6 +1,6 @@
 import * as path$1 from "path";
-import { execFile } from "child_process";
 import * as fs$1 from "fs";
+import { execFile } from "child_process";
 //#region src/schedules/run-script.ts
 /**
 * Runs a schedule's script file at fire time.

package/dist/schema.js

@@ -1,5 +1,5 @@
-import { THINKING_LEVEL_VALUES } from "./thinking.js";
 import { DEFAULT_CONFIG_DIR, DEFAULT_OM_MODEL_ID } from "./constants.js";
+import { THINKING_LEVEL_VALUES } from "./thinking.js";
 import { z } from "zod";
 //#region src/schema.ts
 const stateSchema = z.object({

package/dist/utils/open-url.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Best-effort browser opening for OAuth and other login flows.
+ */
+/**
+ * Open a URL in the default browser without going through a shell.
+ * Only well-formed http(s) URLs are opened; anything else is ignored
+ * (the URL is still displayed for the user to open manually).
+ */
+export declare function openUrlInBrowser(url: string): void;
+//# sourceMappingURL=open-url.d.ts.map

package/dist/utils/open-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-url.d.ts","sourceRoot":"","sources":["../../src/utils/open-url.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAsBlD"}

package/dist/utils/open-url.js

@@ -0,0 +1,30 @@
+import { spawn } from "child_process";
+//#region src/utils/open-url.ts
+/**
+* Best-effort browser opening for OAuth and other login flows.
+*/
+/**
+* Open a URL in the default browser without going through a shell.
+* Only well-formed http(s) URLs are opened; anything else is ignored
+* (the URL is still displayed for the user to open manually).
+*/
+function openUrlInBrowser(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return;
+	}
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return;
+	const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["rundll32", ["url.dll,FileProtocolHandler", url]] : ["xdg-open", [url]];
+	const child = spawn(cmd, args, {
+		stdio: "ignore",
+		detached: true
+	});
+	child.on("error", () => {});
+	child.unref();
+}
+//#endregion
+export { openUrlInBrowser };
+
+//# sourceMappingURL=open-url.js.map

package/dist/utils/open-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-url.js","names":[],"sources":["../../src/utils/open-url.ts"],"sourcesContent":["/**\n * Best-effort browser opening for OAuth and other login flows.\n */\n\nimport { spawn } from 'node:child_process';\n\n/**\n * Open a URL in the default browser without going through a shell.\n * Only well-formed http(s) URLs are opened; anything else is ignored\n * (the URL is still displayed for the user to open manually).\n */\nexport function openUrlInBrowser(url: string): void {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return;\n  }\n  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n    return;\n  }\n\n  const [cmd, args]: [string, string[]] =\n    process.platform === 'darwin'\n      ? ['open', [url]]\n      : process.platform === 'win32'\n        ? ['rundll32', ['url.dll,FileProtocolHandler', url]]\n        : ['xdg-open', [url]];\n\n  const child = spawn(cmd, args, { stdio: 'ignore', detached: true });\n  // Opening the browser is best-effort — the URL is shown to the user as well.\n  child.on('error', () => {});\n  child.unref();\n}\n"],"mappings":";;;;;;;;;;AAWA,SAAgB,iBAAiB,KAAmB;CAClD,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN;CACF;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD;CAGF,MAAM,CAAC,KAAK,QACV,QAAQ,aAAa,WACjB,CAAC,QAAQ,CAAC,GAAG,CAAC,IACd,QAAQ,aAAa,UACnB,CAAC,YAAY,CAAC,+BAA+B,GAAG,CAAC,IACjD,CAAC,YAAY,CAAC,GAAG,CAAC;CAE1B,MAAM,QAAQ,MAAM,KAAK,MAAM;EAAE,OAAO;EAAU,UAAU;CAAK,CAAC;CAElE,MAAM,GAAG,eAAe,CAAC,CAAC;CAC1B,MAAM,MAAM;AACd"}

package/dist/utils/project.js

@@ -1,9 +1,9 @@
 import { DEFAULT_CONFIG_DIR } from "../constants.js";
 import path from "path";
-import { execFile, execSync } from "child_process";
+import { createHash } from "crypto";
 import fs from "fs";
+import { execFile, execSync } from "child_process";
 import os from "os";
-import { createHash } from "crypto";
 //#region src/utils/project.ts
 /**
 * Project detection utilities

package/dist/utils/signals-pubsub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signals-pubsub.d.ts","sourceRoot":"","sources":["../../src/utils/signals-pubsub.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAuBrH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAsCF;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AAmDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,cAAM,aAAc,SAAQ,MAAM;;gBAcpB,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB;IAsBlE,IAAa,cAAc,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAE/D;IAED;;;;OAIG;IACH,gBAAgB,IAAI,aAAa;IAI3B,OAAO,CACX,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,WAAW,CAAC,EACtC,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAChC,OAAO,CAAC,IAAI,CAAC;IAIV,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE;;;;;OAKG;IACY,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B,sEAAsE;IACtE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;CAyMvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,aAAa,CAErG"}
+{"version":3,"file":"signals-pubsub.d.ts","sourceRoot":"","sources":["../../src/utils/signals-pubsub.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAyBrH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAsCF;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvE;AA0DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,cAAM,aAAc,SAAQ,MAAM;;gBAcpB,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB;IAsBlE,IAAa,cAAc,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAE/D;IAED;;;;OAIG;IACH,gBAAgB,IAAI,aAAa;IAI3B,OAAO,CACX,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,WAAW,CAAC,EACtC,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAChC,OAAO,CAAC,IAAI,CAAC;IAIV,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE;;;;;OAKG;IACY,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B,sEAAsE;IACtE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;CAoMvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,aAAa,CAErG"}

package/dist/utils/signals-pubsub.js

@@ -8,8 +8,10 @@ const THREAD_STREAM_PREFIX = "agent.thread-stream.";
 const THREAD_KEY_SEPARATOR = "\0";
 const THREAD_CLAIM_LEASE_PREFIX = "thread-claim:";
 const NOTIFICATION_DISPATCH_LEASE_PREFIX = "notification-dispatch:";
+const LEASE_SOCKET_NAME = ".leases.sock";
 const OWNER_DISCOVERY_TOPIC = "agent.thread-owner-discovery";
 const PEER_DISCOVERY_TOPIC = "agent.thread-peer-discovery";
+const RESERVED_SOCKET_NAME = /^agent_thread-(?:peer|owner)-discovery(?:_|$)/i;
 const MAX_PATH_SEGMENT_LENGTH = 128;
 const UUID_PATTERN = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
 const DISCOVERY_REPLY_TOPIC = new RegExp(`^agent\\.thread-(?:peer|owner)-discovery\\.${UUID_PATTERN}$`, "i");
@@ -78,9 +80,16 @@ function isOwnerDiscoveryTopic(topic) {
 function isPeerDiscoveryTopic(topic) {
 	return topic === PEER_DISCOVERY_TOPIC || topic.startsWith(`${PEER_DISCOVERY_TOPIC}.`);
 }
-/** Whether a name can be a file in a directory: no separators or control characters, not `.`/`..`. */
+/**
+* Whether a threadId can be the base name of a thread's socket file: no
+* separators or control characters, not `.`/`..`, and not a name another
+* socket in the same directory already uses (the lease socket, and the
+* sanitized peer/owner discovery topics and their reply topics), compared
+* case-insensitively because default macOS and Windows filesystems are.
+*/
 function isSafeFileName(value) {
-	if (!value || value === "." || value === "..") return false;
+	if (!value || value === "." || value === ".." || `${value}.sock`.toLowerCase() === LEASE_SOCKET_NAME) return false;
+	if (RESERVED_SOCKET_NAME.test(value)) return false;
 	for (const char of value) {
 		const code = char.charCodeAt(0);
 		if (char === "/" || char === "\\" || code < 32 || code === 127) return false;
@@ -305,7 +314,7 @@ var SignalsPubSub = class extends PubSub {
 	#leasesFor(resourceId) {
 		let socket = this.#leaseSockets.get(resourceId);
 		if (!socket) {
-			socket = new UnixSocketPubSub(join(this.#rootDir, resourceId, ".leases.sock"));
+			socket = new UnixSocketPubSub(join(this.#rootDir, resourceId, LEASE_SOCKET_NAME));
 			this.#leaseSockets.set(resourceId, socket);
 		}
 		return socket;
@@ -370,7 +379,7 @@ var SignalsPubSub = class extends PubSub {
 	}
 	async #socketPath(topic, scope) {
 		let key = topicKey(topic);
-		if (this.#sharedPeerDiscovery && scope !== this.#resourceId && decodeThreadTopic(topic) !== void 0 && !isSafeFileName(key)) throw new Error("Cannot route an agent thread topic whose threadId is not a safe file name");
+		if (decodeThreadTopic(topic) !== void 0 && !isSafeFileName(key)) throw new Error("Cannot route an agent thread topic whose threadId is not a safe file name");
 		const dir = join(this.#rootDir, scope);
 		await mkdir(dir, { recursive: true });
 		const candidate = join(dir, `${key}.sock`);

package/dist/utils/signals-pubsub.js.map

@@ -1 +1 @@
-{"version":3,"file":"signals-pubsub.js","names":["#resourceId","#rootDir","#leaseSockets","#sockets","#pending","#refs","#liveSubscriptions","#clearGenerations","#closing","#leaseProvider","#sharedPeerDiscovery","#canShareDiscovery","#leasesFor","#closed","#publishTo","#dirFor","#subscribeTo","#unsubscribeFrom","#release","#isRefCounted","#getOrCreate","#retain","#initSocket","#socketPath"],"sources":["../../src/utils/signals-pubsub.ts"],"sourcesContent":["import { mkdir } from 'node:fs/promises';\nimport { isAbsolute, join } from 'node:path';\n\nimport { PubSub, UnixSocketPubSub } from '@mastra/core/events';\nimport type { Event, EventCallback, LeaseProvider, PubSubDeliveryMode, SubscribeOptions } from '@mastra/core/events';\n\nconst DEFAULT_SOCKET_ROOT = '/tmp/mc';\nconst SHARED_SCOPE_DIR = '_shared';\nconst THREAD_STREAM_PREFIX = 'agent.thread-stream.';\nconst THREAD_KEY_SEPARATOR = '\\0';\nconst THREAD_CLAIM_LEASE_PREFIX = 'thread-claim:';\nconst NOTIFICATION_DISPATCH_LEASE_PREFIX = 'notification-dispatch:';\nconst OWNER_DISCOVERY_TOPIC = 'agent.thread-owner-discovery';\nconst PEER_DISCOVERY_TOPIC = 'agent.thread-peer-discovery';\nconst MAX_PATH_SEGMENT_LENGTH = 128;\nconst UUID_PATTERN = '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}';\nconst DISCOVERY_REPLY_TOPIC = new RegExp(`^agent\\\\.thread-(?:peer|owner)-discovery\\\\.${UUID_PATTERN}$`, 'i');\nconst IDLE_ACCEPTANCE_REPLY_TOPIC = new RegExp(`^agent\\\\.thread-stream\\\\..+\\\\.idle-acceptance\\\\.${UUID_PATTERN}$`, 'i');\n\n/**\n * One-shot reply topics are minted per request (`<topic>.<uuid>`), used for a\n * single round trip, and never published to again once the request settles.\n */\nfunction isEphemeralTopic(topic: string): boolean {\n  return DISCOVERY_REPLY_TOPIC.test(topic) || IDLE_ACCEPTANCE_REPLY_TOPIC.test(topic);\n}\n\nexport type SignalsPubSubOptions = {\n  /**\n   * Also list this process's threads to, and find threads in, other projects on\n   * this machine: peer discovery runs in `<root>/_shared/` instead of this\n   * resource's directory.\n   */\n  sharedAgentDiscovery?: boolean;\n  /**\n   * Directory that holds every resource's socket directory. Defaults to the\n   * absolute path in `MASTRACODE_SIGNALS_SOCKET_ROOT`, else `/tmp/mc`.\n   */\n  rootDir?: string;\n};\n\nfunction socketRootFromEnv(): string {\n  const root = process.env.MASTRACODE_SIGNALS_SOCKET_ROOT;\n  return root && isAbsolute(root) ? root : DEFAULT_SOCKET_ROOT;\n}\n\n/**\n * Whether an id can name a single directory: no path separators or control\n * characters, not `.`/`..`, and bounded in length.\n */\nfunction isSafePathSegment(value: string): boolean {\n  if (!value || value.length > MAX_PATH_SEGMENT_LENGTH || value === '.' || value === '..') return false;\n  for (const char of value) {\n    const code = char.charCodeAt(0);\n    if (char === '/' || char === '\\\\' || code < 0x20 || code === 0x7f) return false;\n  }\n  return true;\n}\n\n/** The resource a thread key (`<resourceId>\\0<threadId>`) belongs to. */\nfunction resourceOfThreadKey(key: string): string | undefined {\n  const separatorIdx = key.indexOf(THREAD_KEY_SEPARATOR);\n  if (separatorIdx <= 0) return undefined;\n  const resourceId = key.slice(0, separatorIdx);\n  return isSafePathSegment(resourceId) ? resourceId : undefined;\n}\n\n/** Decodes `agent.thread-stream.<encoded resourceId\\0threadId>[...]`. */\nfunction decodeThreadTopic(topic: string): string | undefined {\n  if (!topic.startsWith(THREAD_STREAM_PREFIX)) return undefined;\n  try {\n    return decodeURIComponent(topic.slice(THREAD_STREAM_PREFIX.length));\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * The lease that lets exactly one process dispatch a resource's due\n * notifications. Held in that resource's directory, so every process serving\n * the resource contends for it whichever project it was started in.\n */\nexport function notificationDispatchLeaseKey(resourceId: string): string {\n  return `${NOTIFICATION_DISPATCH_LEASE_PREFIX}${resourceId}`;\n}\n\n/**\n * The resource a lease key belongs to: a thread's run lease and claim lease,\n * and a resource's notification dispatch lease.\n */\nfunction resourceOfLeaseKey(key: string): string | undefined {\n  if (key.startsWith(NOTIFICATION_DISPATCH_LEASE_PREFIX)) {\n    const resourceId = key.slice(NOTIFICATION_DISPATCH_LEASE_PREFIX.length);\n    return isSafePathSegment(resourceId) ? resourceId : undefined;\n  }\n  return resourceOfThreadKey(\n    key.startsWith(THREAD_CLAIM_LEASE_PREFIX) ? key.slice(THREAD_CLAIM_LEASE_PREFIX.length) : key,\n  );\n}\n\nfunction isOwnerDiscoveryTopic(topic: string): boolean {\n  return topic === OWNER_DISCOVERY_TOPIC || topic.startsWith(`${OWNER_DISCOVERY_TOPIC}.`);\n}\n\nfunction isPeerDiscoveryTopic(topic: string): boolean {\n  return topic === PEER_DISCOVERY_TOPIC || topic.startsWith(`${PEER_DISCOVERY_TOPIC}.`);\n}\n\n/** Whether a name can be a file in a directory: no separators or control characters, not `.`/`..`. */\nfunction isSafeFileName(value: string): boolean {\n  if (!value || value === '.' || value === '..') return false;\n  for (const char of value) {\n    const code = char.charCodeAt(0);\n    if (char === '/' || char === '\\\\' || code < 0x20 || code === 0x7f) return false;\n  }\n  return true;\n}\n\n/**\n * Derive a filesystem-safe key for the topic. Thread-stream topics embed\n * a threadId; all other topics use a sanitized version of the topic name.\n */\nfunction topicKey(topic: string): string {\n  const decoded = decodeThreadTopic(topic);\n  if (decoded !== undefined) {\n    const separatorIdx = decoded.indexOf(THREAD_KEY_SEPARATOR);\n    if (separatorIdx !== -1) return decoded.slice(separatorIdx + 1);\n  }\n  return topic.replace(/[^a-zA-Z0-9_-]/g, '_');\n}\n\nfunction socketKey(dir: string, topic: string): string {\n  return `${dir}/${topicKey(topic)}`;\n}\n\n/**\n * A PubSub that manages one Unix socket per topic for cross-process signal\n * coordination between mastracode processes on this machine.\n *\n * Socket paths use `<root>/<dir>/<sanitized-topic>.sock` (root `/tmp/mc`)\n * for inspectability and automatic OS cleanup. Each topic gets its own\n * socket, so broker election and message routing are per-topic.\n *\n * Every process shares one database, so any process can act on any project's\n * thread — the notification dispatcher, for one, delivers whatever is due.\n * Whatever coordinates a thread therefore lives with the thread, not with the\n * process touching it:\n *\n * - A thread's stream topic and its leases (the run lease and the claim\n *   lease) live in the directory of the resource that owns the thread, so a\n *   process from another project sees that thread's active run and claim.\n * - Thread-owner discovery lives in `<root>/_shared/`, so a process that finds\n *   a thread claimed can reach the owner and hand it the signal. It only\n *   answers for a thread the asker names, so it discloses nothing new.\n * - Peer discovery (which lists threads) runs in `<root>/_shared/` when\n *   `sharedAgentDiscovery` is set, so processes in every project can list each\n *   other's threads. Without it, it stays in this resource's directory.\n * - Everything else stays in this process's own resource directory.\n *\n * Stale sockets from crashed processes are handled by\n * {@link UnixSocketPubSub}'s built-in election logic: it detects\n * ECONNREFUSED on a dead broker socket, unlinks it, and re-elects.\n * No blanket cleanup is needed here — that would break concurrent\n * mc instances sharing a directory.\n *\n * One-shot reply topics (discovery and idle-acceptance replies) are\n * reference-counted: every in-flight publish/subscribe and every live\n * subscription holds a reference, and the topic's socket is closed as soon as\n * the count drops to zero. Without this each request would keep a socket, a\n * file descriptor and (for the broker) a socket file for the process lifetime.\n * With `sharedAgentDiscovery`, another resource's thread topics are counted the\n * same way, so a process that signals many threads elsewhere does not keep a\n * socket open for each.\n */\nclass SignalsPubSub extends PubSub {\n  readonly #resourceId: string;\n  readonly #rootDir: string;\n  readonly #leaseSockets = new Map<string, UnixSocketPubSub>();\n  readonly #sockets = new Map<string, UnixSocketPubSub>();\n  readonly #pending = new Map<string, Promise<UnixSocketPubSub>>();\n  readonly #refs = new Map<string, number>();\n  readonly #liveSubscriptions = new Map<string, Set<EventCallback>>();\n  readonly #clearGenerations = new Map<string, number>();\n  readonly #closing = new Map<string, Promise<void>>();\n  readonly #leaseProvider: LeaseProvider;\n  readonly #sharedPeerDiscovery: boolean;\n  #closed = false;\n\n  constructor(resourceId: string, options: SignalsPubSubOptions = {}) {\n    super();\n    this.#resourceId = resourceId;\n    this.#rootDir = options.rootDir ?? socketRootFromEnv();\n    this.#sharedPeerDiscovery = Boolean(options.sharedAgentDiscovery) && this.#canShareDiscovery();\n    // Created eagerly, as before, so this resource's lease socket exists from the start.\n    this.#leasesFor(resourceId);\n    const route = (key: string) => {\n      // Lease sockets are created per resource on demand; once closed, never\n      // reopen one (a lease renewal timer may outlive close()).\n      if (this.#closed) throw new Error('SignalsPubSub is closed');\n      return this.#leasesFor(resourceOfLeaseKey(key) ?? this.#resourceId);\n    };\n    this.#leaseProvider = {\n      acquireLease: async (key, owner, ttlMs) => route(key).acquireLease(key, owner, ttlMs),\n      getLeaseOwner: async key => route(key).getLeaseOwner(key),\n      releaseLease: async (key, owner) => route(key).releaseLease(key, owner),\n      renewLease: async (key, owner, ttlMs) => route(key).renewLease(key, owner, ttlMs),\n      transferLease: async (key, fromOwner, toOwner, ttlMs) => route(key).transferLease(key, fromOwner, toOwner, ttlMs),\n    };\n  }\n\n  override get supportedModes(): ReadonlyArray<PubSubDeliveryMode> {\n    return ['push'];\n  }\n\n  /**\n   * Filesystem leases. A thread's run and claim leases are held in the\n   * directory of the thread's resource, so every process contends for the\n   * same lease; any other key stays in this resource's directory.\n   */\n  getLeaseProvider(): LeaseProvider {\n    return this.#leaseProvider;\n  }\n\n  async publish(\n    topic: string,\n    event: Omit<Event, 'id' | 'createdAt'>,\n    options?: { localOnly?: boolean },\n  ): Promise<void> {\n    await this.#publishTo(topic, this.#dirFor(topic), event, options);\n  }\n\n  async subscribe(topic: string, cb: EventCallback, options?: SubscribeOptions): Promise<void> {\n    await this.#subscribeTo(topic, this.#dirFor(topic), cb, options);\n  }\n\n  async unsubscribe(topic: string, cb: EventCallback): Promise<void> {\n    await this.#unsubscribeFrom(topic, this.#dirFor(topic), cb);\n  }\n\n  /**\n   * Drops a one-shot reply topic: its remaining subscriptions release their\n   * references and the socket closes once no operation still uses it. Other\n   * topics (workflow events, thread streams) have subscribers in other\n   * processes that need the broker, so clearing them is a no-op.\n   */\n  override async clearTopic(topic: string): Promise<void> {\n    if (!isEphemeralTopic(topic)) return;\n    const key = socketKey(this.#dirFor(topic), topic);\n    if (!this.#refs.has(key)) return;\n    this.#clearGenerations.set(key, (this.#clearGenerations.get(key) ?? 0) + 1);\n    const subscriptions = this.#liveSubscriptions.get(key);\n    if (!subscriptions) return;\n    this.#liveSubscriptions.delete(key);\n    for (let i = 0; i < subscriptions.size; i++) this.#release(key);\n  }\n\n  async flush(): Promise<void> {\n    await Promise.all([...this.#sockets.values()].map(s => s.flush()));\n  }\n\n  async close(): Promise<void> {\n    this.#closed = true;\n    await Promise.allSettled([\n      ...[...this.#leaseSockets.values()].map(s => s.close()),\n      ...[...this.#sockets.values()].map(s => s.close()),\n      ...this.#closing.values(),\n    ]);\n    this.#sockets.clear();\n    this.#leaseSockets.clear();\n    this.#refs.clear();\n    this.#liveSubscriptions.clear();\n    this.#clearGenerations.clear();\n  }\n\n  /** Get the underlying socket for a topic (for testing/inspection). */\n  getSocket(topic: string): UnixSocketPubSub | undefined {\n    return this.#sockets.get(socketKey(this.#dirFor(topic), topic));\n  }\n\n  #canShareDiscovery(): boolean {\n    if (isSafePathSegment(this.#resourceId) && this.#resourceId !== SHARED_SCOPE_DIR) return true;\n    console.warn(\n      `Cross-project agent discovery is disabled: resource id ${JSON.stringify(this.#resourceId)} cannot be used as a directory name, so other projects could not reach this instance.`,\n    );\n    return false;\n  }\n\n  /**\n   * One-shot reply topics close once unused. With shared discovery, so do thread\n   * topics routed to another resource; without it, they behave as before.\n   */\n  #isRefCounted(topic: string): boolean {\n    if (isEphemeralTopic(topic)) return true;\n    if (!this.#sharedPeerDiscovery) return false;\n    const decoded = decodeThreadTopic(topic);\n    if (decoded === undefined) return false;\n    const resourceId = resourceOfThreadKey(decoded);\n    return resourceId !== undefined && resourceId !== this.#resourceId;\n  }\n\n  async #publishTo(\n    topic: string,\n    dir: string,\n    event: Omit<Event, 'id' | 'createdAt'>,\n    options?: { localOnly?: boolean },\n  ): Promise<void> {\n    if (!this.#isRefCounted(topic)) {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.publish(topic, event, options);\n      return;\n    }\n    const key = socketKey(dir, topic);\n    // Retain synchronously so a concurrent release cannot close the socket\n    // this publish is about to use.\n    this.#retain(key);\n    try {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.publish(topic, event, options);\n    } finally {\n      this.#release(key);\n    }\n  }\n\n  async #subscribeTo(topic: string, dir: string, cb: EventCallback, options?: SubscribeOptions): Promise<void> {\n    if (!this.#isRefCounted(topic)) {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.subscribe(topic, cb, options);\n      return;\n    }\n    const key = socketKey(dir, topic);\n    this.#retain(key);\n    const generation = this.#clearGenerations.get(key) ?? 0;\n    try {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.subscribe(topic, cb, options);\n      if ((this.#clearGenerations.get(key) ?? 0) !== generation) {\n        // The topic was cleared while this subscribe was in flight.\n        await socket.unsubscribe(topic, cb);\n        return;\n      }\n      let subscriptions = this.#liveSubscriptions.get(key);\n      if (!subscriptions) {\n        subscriptions = new Set();\n        this.#liveSubscriptions.set(key, subscriptions);\n      }\n      if (!subscriptions.has(cb)) {\n        subscriptions.add(cb);\n        this.#retain(key);\n      }\n    } finally {\n      this.#release(key);\n    }\n  }\n\n  async #unsubscribeFrom(topic: string, dir: string, cb: EventCallback): Promise<void> {\n    const key = socketKey(dir, topic);\n    const socket = this.#sockets.get(key);\n    const subscriptions = this.#isRefCounted(topic) ? this.#liveSubscriptions.get(key) : undefined;\n    if (!subscriptions?.delete(cb)) {\n      if (!socket) return;\n      await socket.unsubscribe(topic, cb);\n      return;\n    }\n    if (subscriptions.size === 0) this.#liveSubscriptions.delete(key);\n    try {\n      await socket?.unsubscribe(topic, cb);\n    } finally {\n      this.#release(key);\n    }\n  }\n\n  #leasesFor(resourceId: string): UnixSocketPubSub {\n    let socket = this.#leaseSockets.get(resourceId);\n    if (!socket) {\n      socket = new UnixSocketPubSub(join(this.#rootDir, resourceId, '.leases.sock'));\n      this.#leaseSockets.set(resourceId, socket);\n    }\n    return socket;\n  }\n\n  /** The directory, under the root, that holds a topic's socket. */\n  #dirFor(topic: string): string {\n    if (isOwnerDiscoveryTopic(topic)) return SHARED_SCOPE_DIR;\n    if (this.#sharedPeerDiscovery && isPeerDiscoveryTopic(topic)) return SHARED_SCOPE_DIR;\n    const decoded = decodeThreadTopic(topic);\n    if (decoded !== undefined) return resourceOfThreadKey(decoded) ?? this.#resourceId;\n    return this.#resourceId;\n  }\n\n  #retain(key: string): void {\n    this.#refs.set(key, (this.#refs.get(key) ?? 0) + 1);\n  }\n\n  #release(key: string): void {\n    const refs = (this.#refs.get(key) ?? 0) - 1;\n    if (refs > 0) {\n      this.#refs.set(key, refs);\n      return;\n    }\n    this.#refs.delete(key);\n    this.#clearGenerations.delete(key);\n    this.#liveSubscriptions.delete(key);\n    const socket = this.#sockets.get(key);\n    if (!socket) return;\n    this.#sockets.delete(key);\n    const closing: Promise<void> = socket\n      .close()\n      .catch(() => {})\n      .finally(() => {\n        if (this.#closing.get(key) === closing) this.#closing.delete(key);\n      });\n    this.#closing.set(key, closing);\n  }\n\n  async #getOrCreate(topic: string, dir: string): Promise<UnixSocketPubSub> {\n    if (this.#closed) throw new Error('SignalsPubSub is closed');\n    const key = socketKey(dir, topic);\n    // A socket for this key may still be closing after its last reference\n    // was released; never hand out the closing instance.\n    const closing = this.#closing.get(key);\n    if (closing) {\n      await closing;\n      if (this.#closed) throw new Error('SignalsPubSub is closed');\n    }\n    const existing = this.#sockets.get(key);\n    if (existing) return existing;\n    // Deduplicate concurrent callers so only one socket is created per topic.\n    let inflight = this.#pending.get(key);\n    if (!inflight) {\n      inflight = this.#initSocket(topic, dir, key);\n      this.#pending.set(key, inflight);\n    }\n    const socket = await inflight;\n    if (this.#closed) throw new Error('SignalsPubSub is closed');\n    return socket;\n  }\n\n  async #initSocket(topic: string, dir: string, key: string): Promise<UnixSocketPubSub> {\n    try {\n      const socketPath = await this.#socketPath(topic, dir);\n      if (this.#closed) throw new Error('SignalsPubSub is closed');\n      const socket = new UnixSocketPubSub(socketPath);\n      this.#sockets.set(key, socket);\n      return socket;\n    } finally {\n      this.#pending.delete(key);\n    }\n  }\n\n  async #socketPath(topic: string, scope: string): Promise<string> {\n    let key = topicKey(topic);\n    // With shared discovery, another project's threadIds reach this process\n    // through discovery; a threadId names a file in that resource's directory,\n    // so never let it reach outside it.\n    if (\n      this.#sharedPeerDiscovery &&\n      scope !== this.#resourceId &&\n      decodeThreadTopic(topic) !== undefined &&\n      !isSafeFileName(key)\n    ) {\n      throw new Error('Cannot route an agent thread topic whose threadId is not a safe file name');\n    }\n    const dir = join(this.#rootDir, scope);\n    await mkdir(dir, { recursive: true });\n    const candidate = join(dir, `${key}.sock`);\n    // macOS sun_path limit is 104 bytes; Linux is 108. Use 104 as the\n    // conservative bound. When the path is too long, replace the key with\n    // a short hash so the socket can still be created.\n    if (Buffer.byteLength(candidate) > 104) {\n      key = Buffer.from(await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(key)))\n        .toString('hex')\n        .slice(0, 16);\n      return join(dir, `${key}.sock`);\n    }\n    return candidate;\n  }\n}\n\n/**\n * Creates a per-topic PubSub backed by Unix sockets for cross-process signal\n * and workflow event coordination between mastracode processes.\n *\n * Topics live under `/tmp/mc/<resourceId>/`, except that a thread's stream and\n * leases live under its own resource's directory and thread-owner discovery\n * under `/tmp/mc/_shared/` (see {@link SignalsPubSub}). With\n * `sharedAgentDiscovery`, peer discovery runs there too. Stale sockets from\n * crashed processes are handled by the underlying {@link UnixSocketPubSub}'s\n * broker election logic.\n */\nexport function createSignalsPubSub(resourceId: string, options?: SignalsPubSubOptions): SignalsPubSub {\n  return new SignalsPubSub(resourceId, options);\n}\n"],"mappings":";;;;AAMA,MAAM,sBAAsB;AAC5B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,4BAA4B;AAClC,MAAM,qCAAqC;AAC3C,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,0BAA0B;AAChC,MAAM,eAAe;AACrB,MAAM,wBAAwB,IAAI,OAAO,8CAA8C,aAAa,IAAI,GAAG;AAC3G,MAAM,8BAA8B,IAAI,OAAO,mDAAmD,aAAa,IAAI,GAAG;;;;;AAMtH,SAAS,iBAAiB,OAAwB;CAChD,OAAO,sBAAsB,KAAK,KAAK,KAAK,4BAA4B,KAAK,KAAK;AACpF;AAgBA,SAAS,oBAA4B;CACnC,MAAM,OAAO,QAAQ,IAAI;CACzB,OAAO,QAAQ,WAAW,IAAI,IAAI,OAAO;AAC3C;;;;;AAMA,SAAS,kBAAkB,OAAwB;CACjD,IAAI,CAAC,SAAS,MAAM,SAAS,2BAA2B,UAAU,OAAO,UAAU,MAAM,OAAO;CAChG,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,WAAW,CAAC;EAC9B,IAAI,SAAS,OAAO,SAAS,QAAQ,OAAO,MAAQ,SAAS,KAAM,OAAO;CAC5E;CACA,OAAO;AACT;;AAGA,SAAS,oBAAoB,KAAiC;CAC5D,MAAM,eAAe,IAAI,QAAQ,oBAAoB;CACrD,IAAI,gBAAgB,GAAG,OAAO,KAAA;CAC9B,MAAM,aAAa,IAAI,MAAM,GAAG,YAAY;CAC5C,OAAO,kBAAkB,UAAU,IAAI,aAAa,KAAA;AACtD;;AAGA,SAAS,kBAAkB,OAAmC;CAC5D,IAAI,CAAC,MAAM,WAAW,oBAAoB,GAAG,OAAO,KAAA;CACpD,IAAI;EACF,OAAO,mBAAmB,MAAM,MAAM,EAA2B,CAAC;CACpE,QAAQ;EACN;CACF;AACF;;;;;;AAOA,SAAgB,6BAA6B,YAA4B;CACvE,OAAO,GAAG,qCAAqC;AACjD;;;;;AAMA,SAAS,mBAAmB,KAAiC;CAC3D,IAAI,IAAI,WAAW,kCAAkC,GAAG;EACtD,MAAM,aAAa,IAAI,MAAM,EAAyC;EACtE,OAAO,kBAAkB,UAAU,IAAI,aAAa,KAAA;CACtD;CACA,OAAO,oBACL,IAAI,WAAW,yBAAyB,IAAI,IAAI,MAAM,EAAgC,IAAI,GAC5F;AACF;AAEA,SAAS,sBAAsB,OAAwB;CACrD,OAAO,UAAU,yBAAyB,MAAM,WAAW,GAAG,sBAAsB,EAAE;AACxF;AAEA,SAAS,qBAAqB,OAAwB;CACpD,OAAO,UAAU,wBAAwB,MAAM,WAAW,GAAG,qBAAqB,EAAE;AACtF;;AAGA,SAAS,eAAe,OAAwB;CAC9C,IAAI,CAAC,SAAS,UAAU,OAAO,UAAU,MAAM,OAAO;CACtD,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,WAAW,CAAC;EAC9B,IAAI,SAAS,OAAO,SAAS,QAAQ,OAAO,MAAQ,SAAS,KAAM,OAAO;CAC5E;CACA,OAAO;AACT;;;;;AAMA,SAAS,SAAS,OAAuB;CACvC,MAAM,UAAU,kBAAkB,KAAK;CACvC,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,eAAe,QAAQ,QAAQ,oBAAoB;EACzD,IAAI,iBAAiB,IAAI,OAAO,QAAQ,MAAM,eAAe,CAAC;CAChE;CACA,OAAO,MAAM,QAAQ,mBAAmB,GAAG;AAC7C;AAEA,SAAS,UAAU,KAAa,OAAuB;CACrD,OAAO,GAAG,IAAI,GAAG,SAAS,KAAK;AACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAM,gBAAN,cAA4B,OAAO;CACjC;CACA;CACA,gCAAyB,IAAI,IAA8B;CAC3D,2BAAoB,IAAI,IAA8B;CACtD,2BAAoB,IAAI,IAAuC;CAC/D,wBAAiB,IAAI,IAAoB;CACzC,qCAA8B,IAAI,IAAgC;CAClE,oCAA6B,IAAI,IAAoB;CACrD,2BAAoB,IAAI,IAA2B;CACnD;CACA;CACA,UAAU;CAEV,YAAY,YAAoB,UAAgC,CAAC,GAAG;EAClE,MAAM;EACN,KAAKA,cAAc;EACnB,KAAKC,WAAW,QAAQ,WAAW,kBAAkB;EACrD,KAAKS,uBAAuB,QAAQ,QAAQ,oBAAoB,KAAK,KAAKC,mBAAmB;EAE7F,KAAKC,WAAW,UAAU;EAC1B,MAAM,SAAS,QAAgB;GAG7B,IAAI,KAAKC,SAAS,MAAM,IAAI,MAAM,yBAAyB;GAC3D,OAAO,KAAKD,WAAW,mBAAmB,GAAG,KAAK,KAAKZ,WAAW;EACpE;EACA,KAAKS,iBAAiB;GACpB,cAAc,OAAO,KAAK,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,aAAa,KAAK,OAAO,KAAK;GACpF,eAAe,OAAM,QAAO,MAAM,GAAG,CAAC,CAAC,cAAc,GAAG;GACxD,cAAc,OAAO,KAAK,UAAU,MAAM,GAAG,CAAC,CAAC,aAAa,KAAK,KAAK;GACtE,YAAY,OAAO,KAAK,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK;GAChF,eAAe,OAAO,KAAK,WAAW,SAAS,UAAU,MAAM,GAAG,CAAC,CAAC,cAAc,KAAK,WAAW,SAAS,KAAK;EAClH;CACF;CAEA,IAAa,iBAAoD;EAC/D,OAAO,CAAC,MAAM;CAChB;;;;;;CAOA,mBAAkC;EAChC,OAAO,KAAKA;CACd;CAEA,MAAM,QACJ,OACA,OACA,SACe;EACf,MAAM,KAAKK,WAAW,OAAO,KAAKC,QAAQ,KAAK,GAAG,OAAO,OAAO;CAClE;CAEA,MAAM,UAAU,OAAe,IAAmB,SAA2C;EAC3F,MAAM,KAAKC,aAAa,OAAO,KAAKD,QAAQ,KAAK,GAAG,IAAI,OAAO;CACjE;CAEA,MAAM,YAAY,OAAe,IAAkC;EACjE,MAAM,KAAKE,iBAAiB,OAAO,KAAKF,QAAQ,KAAK,GAAG,EAAE;CAC5D;;;;;;;CAQA,MAAe,WAAW,OAA8B;EACtD,IAAI,CAAC,iBAAiB,KAAK,GAAG;EAC9B,MAAM,MAAM,UAAU,KAAKA,QAAQ,KAAK,GAAG,KAAK;EAChD,IAAI,CAAC,KAAKV,MAAM,IAAI,GAAG,GAAG;EAC1B,KAAKE,kBAAkB,IAAI,MAAM,KAAKA,kBAAkB,IAAI,GAAG,KAAK,KAAK,CAAC;EAC1E,MAAM,gBAAgB,KAAKD,mBAAmB,IAAI,GAAG;EACrD,IAAI,CAAC,eAAe;EACpB,KAAKA,mBAAmB,OAAO,GAAG;EAClC,KAAK,IAAI,IAAI,GAAG,IAAI,cAAc,MAAM,KAAK,KAAKY,SAAS,GAAG;CAChE;CAEA,MAAM,QAAuB;EAC3B,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAKf,SAAS,OAAO,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC,CAAC;CACnE;CAEA,MAAM,QAAuB;EAC3B,KAAKU,UAAU;EACf,MAAM,QAAQ,WAAW;GACvB,GAAG,CAAC,GAAG,KAAKX,cAAc,OAAO,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC;GACtD,GAAG,CAAC,GAAG,KAAKC,SAAS,OAAO,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC;GACjD,GAAG,KAAKK,SAAS,OAAO;EAC1B,CAAC;EACD,KAAKL,SAAS,MAAM;EACpB,KAAKD,cAAc,MAAM;EACzB,KAAKG,MAAM,MAAM;EACjB,KAAKC,mBAAmB,MAAM;EAC9B,KAAKC,kBAAkB,MAAM;CAC/B;;CAGA,UAAU,OAA6C;EACrD,OAAO,KAAKJ,SAAS,IAAI,UAAU,KAAKY,QAAQ,KAAK,GAAG,KAAK,CAAC;CAChE;CAEA,qBAA8B;EAC5B,IAAI,kBAAkB,KAAKf,WAAW,KAAK,KAAKA,gBAAgB,kBAAkB,OAAO;EACzF,QAAQ,KACN,0DAA0D,KAAK,UAAU,KAAKA,WAAW,EAAE,sFAC7F;EACA,OAAO;CACT;;;;;CAMA,cAAc,OAAwB;EACpC,IAAI,iBAAiB,KAAK,GAAG,OAAO;EACpC,IAAI,CAAC,KAAKU,sBAAsB,OAAO;EACvC,MAAM,UAAU,kBAAkB,KAAK;EACvC,IAAI,YAAY,KAAA,GAAW,OAAO;EAClC,MAAM,aAAa,oBAAoB,OAAO;EAC9C,OAAO,eAAe,KAAA,KAAa,eAAe,KAAKV;CACzD;CAEA,MAAMc,WACJ,OACA,KACA,OACA,SACe;EACf,IAAI,CAAC,KAAKK,cAAc,KAAK,GAAG;GAE9B,OAAM,MADe,KAAKC,aAAa,OAAO,GAAG,EAAA,CACpC,QAAQ,OAAO,OAAO,OAAO;GAC1C;EACF;EACA,MAAM,MAAM,UAAU,KAAK,KAAK;EAGhC,KAAKC,QAAQ,GAAG;EAChB,IAAI;GAEF,OAAM,MADe,KAAKD,aAAa,OAAO,GAAG,EAAA,CACpC,QAAQ,OAAO,OAAO,OAAO;EAC5C,UAAU;GACR,KAAKF,SAAS,GAAG;EACnB;CACF;CAEA,MAAMF,aAAa,OAAe,KAAa,IAAmB,SAA2C;EAC3G,IAAI,CAAC,KAAKG,cAAc,KAAK,GAAG;GAE9B,OAAM,MADe,KAAKC,aAAa,OAAO,GAAG,EAAA,CACpC,UAAU,OAAO,IAAI,OAAO;GACzC;EACF;EACA,MAAM,MAAM,UAAU,KAAK,KAAK;EAChC,KAAKC,QAAQ,GAAG;EAChB,MAAM,aAAa,KAAKd,kBAAkB,IAAI,GAAG,KAAK;EACtD,IAAI;GACF,MAAM,SAAS,MAAM,KAAKa,aAAa,OAAO,GAAG;GACjD,MAAM,OAAO,UAAU,OAAO,IAAI,OAAO;GACzC,KAAK,KAAKb,kBAAkB,IAAI,GAAG,KAAK,OAAO,YAAY;IAEzD,MAAM,OAAO,YAAY,OAAO,EAAE;IAClC;GACF;GACA,IAAI,gBAAgB,KAAKD,mBAAmB,IAAI,GAAG;GACnD,IAAI,CAAC,eAAe;IAClB,gCAAgB,IAAI,IAAI;IACxB,KAAKA,mBAAmB,IAAI,KAAK,aAAa;GAChD;GACA,IAAI,CAAC,cAAc,IAAI,EAAE,GAAG;IAC1B,cAAc,IAAI,EAAE;IACpB,KAAKe,QAAQ,GAAG;GAClB;EACF,UAAU;GACR,KAAKH,SAAS,GAAG;EACnB;CACF;CAEA,MAAMD,iBAAiB,OAAe,KAAa,IAAkC;EACnF,MAAM,MAAM,UAAU,KAAK,KAAK;EAChC,MAAM,SAAS,KAAKd,SAAS,IAAI,GAAG;EACpC,MAAM,gBAAgB,KAAKgB,cAAc,KAAK,IAAI,KAAKb,mBAAmB,IAAI,GAAG,IAAI,KAAA;EACrF,IAAI,CAAC,eAAe,OAAO,EAAE,GAAG;GAC9B,IAAI,CAAC,QAAQ;GACb,MAAM,OAAO,YAAY,OAAO,EAAE;GAClC;EACF;EACA,IAAI,cAAc,SAAS,GAAG,KAAKA,mBAAmB,OAAO,GAAG;EAChE,IAAI;GACF,MAAM,QAAQ,YAAY,OAAO,EAAE;EACrC,UAAU;GACR,KAAKY,SAAS,GAAG;EACnB;CACF;CAEA,WAAW,YAAsC;EAC/C,IAAI,SAAS,KAAKhB,cAAc,IAAI,UAAU;EAC9C,IAAI,CAAC,QAAQ;GACX,SAAS,IAAI,iBAAiB,KAAK,KAAKD,UAAU,YAAY,cAAc,CAAC;GAC7E,KAAKC,cAAc,IAAI,YAAY,MAAM;EAC3C;EACA,OAAO;CACT;;CAGA,QAAQ,OAAuB;EAC7B,IAAI,sBAAsB,KAAK,GAAG,OAAO;EACzC,IAAI,KAAKQ,wBAAwB,qBAAqB,KAAK,GAAG,OAAO;EACrE,MAAM,UAAU,kBAAkB,KAAK;EACvC,IAAI,YAAY,KAAA,GAAW,OAAO,oBAAoB,OAAO,KAAK,KAAKV;EACvE,OAAO,KAAKA;CACd;CAEA,QAAQ,KAAmB;EACzB,KAAKK,MAAM,IAAI,MAAM,KAAKA,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC;CACpD;CAEA,SAAS,KAAmB;EAC1B,MAAM,QAAQ,KAAKA,MAAM,IAAI,GAAG,KAAK,KAAK;EAC1C,IAAI,OAAO,GAAG;GACZ,KAAKA,MAAM,IAAI,KAAK,IAAI;GACxB;EACF;EACA,KAAKA,MAAM,OAAO,GAAG;EACrB,KAAKE,kBAAkB,OAAO,GAAG;EACjC,KAAKD,mBAAmB,OAAO,GAAG;EAClC,MAAM,SAAS,KAAKH,SAAS,IAAI,GAAG;EACpC,IAAI,CAAC,QAAQ;EACb,KAAKA,SAAS,OAAO,GAAG;EACxB,MAAM,UAAyB,OAC5B,MAAM,CAAC,CACP,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;GACb,IAAI,KAAKK,SAAS,IAAI,GAAG,MAAM,SAAS,KAAKA,SAAS,OAAO,GAAG;EAClE,CAAC;EACH,KAAKA,SAAS,IAAI,KAAK,OAAO;CAChC;CAEA,MAAMY,aAAa,OAAe,KAAwC;EACxE,IAAI,KAAKP,SAAS,MAAM,IAAI,MAAM,yBAAyB;EAC3D,MAAM,MAAM,UAAU,KAAK,KAAK;EAGhC,MAAM,UAAU,KAAKL,SAAS,IAAI,GAAG;EACrC,IAAI,SAAS;GACX,MAAM;GACN,IAAI,KAAKK,SAAS,MAAM,IAAI,MAAM,yBAAyB;EAC7D;EACA,MAAM,WAAW,KAAKV,SAAS,IAAI,GAAG;EACtC,IAAI,UAAU,OAAO;EAErB,IAAI,WAAW,KAAKC,SAAS,IAAI,GAAG;EACpC,IAAI,CAAC,UAAU;GACb,WAAW,KAAKkB,YAAY,OAAO,KAAK,GAAG;GAC3C,KAAKlB,SAAS,IAAI,KAAK,QAAQ;EACjC;EACA,MAAM,SAAS,MAAM;EACrB,IAAI,KAAKS,SAAS,MAAM,IAAI,MAAM,yBAAyB;EAC3D,OAAO;CACT;CAEA,MAAMS,YAAY,OAAe,KAAa,KAAwC;EACpF,IAAI;GACF,MAAM,aAAa,MAAM,KAAKC,YAAY,OAAO,GAAG;GACpD,IAAI,KAAKV,SAAS,MAAM,IAAI,MAAM,yBAAyB;GAC3D,MAAM,SAAS,IAAI,iBAAiB,UAAU;GAC9C,KAAKV,SAAS,IAAI,KAAK,MAAM;GAC7B,OAAO;EACT,UAAU;GACR,KAAKC,SAAS,OAAO,GAAG;EAC1B;CACF;CAEA,MAAMmB,YAAY,OAAe,OAAgC;EAC/D,IAAI,MAAM,SAAS,KAAK;EAIxB,IACE,KAAKb,wBACL,UAAU,KAAKV,eACf,kBAAkB,KAAK,MAAM,KAAA,KAC7B,CAAC,eAAe,GAAG,GAEnB,MAAM,IAAI,MAAM,2EAA2E;EAE7F,MAAM,MAAM,KAAK,KAAKC,UAAU,KAAK;EACrC,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;EACpC,MAAM,YAAY,KAAK,KAAK,GAAG,IAAI,MAAM;EAIzC,IAAI,OAAO,WAAW,SAAS,IAAI,KAAK;GACtC,MAAM,OAAO,KAAK,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAC/F,SAAS,KAAK,CAAC,CACf,MAAM,GAAG,EAAE;GACd,OAAO,KAAK,KAAK,GAAG,IAAI,MAAM;EAChC;EACA,OAAO;CACT;AACF;;;;;;;;;;;;AAaA,SAAgB,oBAAoB,YAAoB,SAA+C;CACrG,OAAO,IAAI,cAAc,YAAY,OAAO;AAC9C"}
+{"version":3,"file":"signals-pubsub.js","names":["#resourceId","#rootDir","#leaseSockets","#sockets","#pending","#refs","#liveSubscriptions","#clearGenerations","#closing","#leaseProvider","#sharedPeerDiscovery","#canShareDiscovery","#leasesFor","#closed","#publishTo","#dirFor","#subscribeTo","#unsubscribeFrom","#release","#isRefCounted","#getOrCreate","#retain","#initSocket","#socketPath"],"sources":["../../src/utils/signals-pubsub.ts"],"sourcesContent":["import { mkdir } from 'node:fs/promises';\nimport { isAbsolute, join } from 'node:path';\n\nimport { PubSub, UnixSocketPubSub } from '@mastra/core/events';\nimport type { Event, EventCallback, LeaseProvider, PubSubDeliveryMode, SubscribeOptions } from '@mastra/core/events';\n\nconst DEFAULT_SOCKET_ROOT = '/tmp/mc';\nconst SHARED_SCOPE_DIR = '_shared';\nconst THREAD_STREAM_PREFIX = 'agent.thread-stream.';\nconst THREAD_KEY_SEPARATOR = '\\0';\nconst THREAD_CLAIM_LEASE_PREFIX = 'thread-claim:';\nconst NOTIFICATION_DISPATCH_LEASE_PREFIX = 'notification-dispatch:';\nconst LEASE_SOCKET_NAME = '.leases.sock';\nconst OWNER_DISCOVERY_TOPIC = 'agent.thread-owner-discovery';\nconst PEER_DISCOVERY_TOPIC = 'agent.thread-peer-discovery';\nconst RESERVED_SOCKET_NAME = /^agent_thread-(?:peer|owner)-discovery(?:_|$)/i;\nconst MAX_PATH_SEGMENT_LENGTH = 128;\nconst UUID_PATTERN = '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}';\nconst DISCOVERY_REPLY_TOPIC = new RegExp(`^agent\\\\.thread-(?:peer|owner)-discovery\\\\.${UUID_PATTERN}$`, 'i');\nconst IDLE_ACCEPTANCE_REPLY_TOPIC = new RegExp(`^agent\\\\.thread-stream\\\\..+\\\\.idle-acceptance\\\\.${UUID_PATTERN}$`, 'i');\n\n/**\n * One-shot reply topics are minted per request (`<topic>.<uuid>`), used for a\n * single round trip, and never published to again once the request settles.\n */\nfunction isEphemeralTopic(topic: string): boolean {\n  return DISCOVERY_REPLY_TOPIC.test(topic) || IDLE_ACCEPTANCE_REPLY_TOPIC.test(topic);\n}\n\nexport type SignalsPubSubOptions = {\n  /**\n   * Also list this process's threads to, and find threads in, other projects on\n   * this machine: peer discovery runs in `<root>/_shared/` instead of this\n   * resource's directory.\n   */\n  sharedAgentDiscovery?: boolean;\n  /**\n   * Directory that holds every resource's socket directory. Defaults to the\n   * absolute path in `MASTRACODE_SIGNALS_SOCKET_ROOT`, else `/tmp/mc`.\n   */\n  rootDir?: string;\n};\n\nfunction socketRootFromEnv(): string {\n  const root = process.env.MASTRACODE_SIGNALS_SOCKET_ROOT;\n  return root && isAbsolute(root) ? root : DEFAULT_SOCKET_ROOT;\n}\n\n/**\n * Whether an id can name a single directory: no path separators or control\n * characters, not `.`/`..`, and bounded in length.\n */\nfunction isSafePathSegment(value: string): boolean {\n  if (!value || value.length > MAX_PATH_SEGMENT_LENGTH || value === '.' || value === '..') return false;\n  for (const char of value) {\n    const code = char.charCodeAt(0);\n    if (char === '/' || char === '\\\\' || code < 0x20 || code === 0x7f) return false;\n  }\n  return true;\n}\n\n/** The resource a thread key (`<resourceId>\\0<threadId>`) belongs to. */\nfunction resourceOfThreadKey(key: string): string | undefined {\n  const separatorIdx = key.indexOf(THREAD_KEY_SEPARATOR);\n  if (separatorIdx <= 0) return undefined;\n  const resourceId = key.slice(0, separatorIdx);\n  return isSafePathSegment(resourceId) ? resourceId : undefined;\n}\n\n/** Decodes `agent.thread-stream.<encoded resourceId\\0threadId>[...]`. */\nfunction decodeThreadTopic(topic: string): string | undefined {\n  if (!topic.startsWith(THREAD_STREAM_PREFIX)) return undefined;\n  try {\n    return decodeURIComponent(topic.slice(THREAD_STREAM_PREFIX.length));\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * The lease that lets exactly one process dispatch a resource's due\n * notifications. Held in that resource's directory, so every process serving\n * the resource contends for it whichever project it was started in.\n */\nexport function notificationDispatchLeaseKey(resourceId: string): string {\n  return `${NOTIFICATION_DISPATCH_LEASE_PREFIX}${resourceId}`;\n}\n\n/**\n * The resource a lease key belongs to: a thread's run lease and claim lease,\n * and a resource's notification dispatch lease.\n */\nfunction resourceOfLeaseKey(key: string): string | undefined {\n  if (key.startsWith(NOTIFICATION_DISPATCH_LEASE_PREFIX)) {\n    const resourceId = key.slice(NOTIFICATION_DISPATCH_LEASE_PREFIX.length);\n    return isSafePathSegment(resourceId) ? resourceId : undefined;\n  }\n  return resourceOfThreadKey(\n    key.startsWith(THREAD_CLAIM_LEASE_PREFIX) ? key.slice(THREAD_CLAIM_LEASE_PREFIX.length) : key,\n  );\n}\n\nfunction isOwnerDiscoveryTopic(topic: string): boolean {\n  return topic === OWNER_DISCOVERY_TOPIC || topic.startsWith(`${OWNER_DISCOVERY_TOPIC}.`);\n}\n\nfunction isPeerDiscoveryTopic(topic: string): boolean {\n  return topic === PEER_DISCOVERY_TOPIC || topic.startsWith(`${PEER_DISCOVERY_TOPIC}.`);\n}\n\n/**\n * Whether a threadId can be the base name of a thread's socket file: no\n * separators or control characters, not `.`/`..`, and not a name another\n * socket in the same directory already uses (the lease socket, and the\n * sanitized peer/owner discovery topics and their reply topics), compared\n * case-insensitively because default macOS and Windows filesystems are.\n */\nfunction isSafeFileName(value: string): boolean {\n  if (!value || value === '.' || value === '..' || `${value}.sock`.toLowerCase() === LEASE_SOCKET_NAME) return false;\n  if (RESERVED_SOCKET_NAME.test(value)) return false;\n  for (const char of value) {\n    const code = char.charCodeAt(0);\n    if (char === '/' || char === '\\\\' || code < 0x20 || code === 0x7f) return false;\n  }\n  return true;\n}\n\n/**\n * Derive a filesystem-safe key for the topic. Thread-stream topics embed\n * a threadId; all other topics use a sanitized version of the topic name.\n */\nfunction topicKey(topic: string): string {\n  const decoded = decodeThreadTopic(topic);\n  if (decoded !== undefined) {\n    const separatorIdx = decoded.indexOf(THREAD_KEY_SEPARATOR);\n    if (separatorIdx !== -1) return decoded.slice(separatorIdx + 1);\n  }\n  return topic.replace(/[^a-zA-Z0-9_-]/g, '_');\n}\n\nfunction socketKey(dir: string, topic: string): string {\n  return `${dir}/${topicKey(topic)}`;\n}\n\n/**\n * A PubSub that manages one Unix socket per topic for cross-process signal\n * coordination between mastracode processes on this machine.\n *\n * Socket paths use `<root>/<dir>/<sanitized-topic>.sock` (root `/tmp/mc`)\n * for inspectability and automatic OS cleanup. Each topic gets its own\n * socket, so broker election and message routing are per-topic.\n *\n * Every process shares one database, so any process can act on any project's\n * thread — the notification dispatcher, for one, delivers whatever is due.\n * Whatever coordinates a thread therefore lives with the thread, not with the\n * process touching it:\n *\n * - A thread's stream topic and its leases (the run lease and the claim\n *   lease) live in the directory of the resource that owns the thread, so a\n *   process from another project sees that thread's active run and claim.\n * - Thread-owner discovery lives in `<root>/_shared/`, so a process that finds\n *   a thread claimed can reach the owner and hand it the signal. It only\n *   answers for a thread the asker names, so it discloses nothing new.\n * - Peer discovery (which lists threads) runs in `<root>/_shared/` when\n *   `sharedAgentDiscovery` is set, so processes in every project can list each\n *   other's threads. Without it, it stays in this resource's directory.\n * - Everything else stays in this process's own resource directory.\n *\n * Stale sockets from crashed processes are handled by\n * {@link UnixSocketPubSub}'s built-in election logic: it detects\n * ECONNREFUSED on a dead broker socket, unlinks it, and re-elects.\n * No blanket cleanup is needed here — that would break concurrent\n * mc instances sharing a directory.\n *\n * One-shot reply topics (discovery and idle-acceptance replies) are\n * reference-counted: every in-flight publish/subscribe and every live\n * subscription holds a reference, and the topic's socket is closed as soon as\n * the count drops to zero. Without this each request would keep a socket, a\n * file descriptor and (for the broker) a socket file for the process lifetime.\n * With `sharedAgentDiscovery`, another resource's thread topics are counted the\n * same way, so a process that signals many threads elsewhere does not keep a\n * socket open for each.\n */\nclass SignalsPubSub extends PubSub {\n  readonly #resourceId: string;\n  readonly #rootDir: string;\n  readonly #leaseSockets = new Map<string, UnixSocketPubSub>();\n  readonly #sockets = new Map<string, UnixSocketPubSub>();\n  readonly #pending = new Map<string, Promise<UnixSocketPubSub>>();\n  readonly #refs = new Map<string, number>();\n  readonly #liveSubscriptions = new Map<string, Set<EventCallback>>();\n  readonly #clearGenerations = new Map<string, number>();\n  readonly #closing = new Map<string, Promise<void>>();\n  readonly #leaseProvider: LeaseProvider;\n  readonly #sharedPeerDiscovery: boolean;\n  #closed = false;\n\n  constructor(resourceId: string, options: SignalsPubSubOptions = {}) {\n    super();\n    this.#resourceId = resourceId;\n    this.#rootDir = options.rootDir ?? socketRootFromEnv();\n    this.#sharedPeerDiscovery = Boolean(options.sharedAgentDiscovery) && this.#canShareDiscovery();\n    // Created eagerly, as before, so this resource's lease socket exists from the start.\n    this.#leasesFor(resourceId);\n    const route = (key: string) => {\n      // Lease sockets are created per resource on demand; once closed, never\n      // reopen one (a lease renewal timer may outlive close()).\n      if (this.#closed) throw new Error('SignalsPubSub is closed');\n      return this.#leasesFor(resourceOfLeaseKey(key) ?? this.#resourceId);\n    };\n    this.#leaseProvider = {\n      acquireLease: async (key, owner, ttlMs) => route(key).acquireLease(key, owner, ttlMs),\n      getLeaseOwner: async key => route(key).getLeaseOwner(key),\n      releaseLease: async (key, owner) => route(key).releaseLease(key, owner),\n      renewLease: async (key, owner, ttlMs) => route(key).renewLease(key, owner, ttlMs),\n      transferLease: async (key, fromOwner, toOwner, ttlMs) => route(key).transferLease(key, fromOwner, toOwner, ttlMs),\n    };\n  }\n\n  override get supportedModes(): ReadonlyArray<PubSubDeliveryMode> {\n    return ['push'];\n  }\n\n  /**\n   * Filesystem leases. A thread's run and claim leases are held in the\n   * directory of the thread's resource, so every process contends for the\n   * same lease; any other key stays in this resource's directory.\n   */\n  getLeaseProvider(): LeaseProvider {\n    return this.#leaseProvider;\n  }\n\n  async publish(\n    topic: string,\n    event: Omit<Event, 'id' | 'createdAt'>,\n    options?: { localOnly?: boolean },\n  ): Promise<void> {\n    await this.#publishTo(topic, this.#dirFor(topic), event, options);\n  }\n\n  async subscribe(topic: string, cb: EventCallback, options?: SubscribeOptions): Promise<void> {\n    await this.#subscribeTo(topic, this.#dirFor(topic), cb, options);\n  }\n\n  async unsubscribe(topic: string, cb: EventCallback): Promise<void> {\n    await this.#unsubscribeFrom(topic, this.#dirFor(topic), cb);\n  }\n\n  /**\n   * Drops a one-shot reply topic: its remaining subscriptions release their\n   * references and the socket closes once no operation still uses it. Other\n   * topics (workflow events, thread streams) have subscribers in other\n   * processes that need the broker, so clearing them is a no-op.\n   */\n  override async clearTopic(topic: string): Promise<void> {\n    if (!isEphemeralTopic(topic)) return;\n    const key = socketKey(this.#dirFor(topic), topic);\n    if (!this.#refs.has(key)) return;\n    this.#clearGenerations.set(key, (this.#clearGenerations.get(key) ?? 0) + 1);\n    const subscriptions = this.#liveSubscriptions.get(key);\n    if (!subscriptions) return;\n    this.#liveSubscriptions.delete(key);\n    for (let i = 0; i < subscriptions.size; i++) this.#release(key);\n  }\n\n  async flush(): Promise<void> {\n    await Promise.all([...this.#sockets.values()].map(s => s.flush()));\n  }\n\n  async close(): Promise<void> {\n    this.#closed = true;\n    await Promise.allSettled([\n      ...[...this.#leaseSockets.values()].map(s => s.close()),\n      ...[...this.#sockets.values()].map(s => s.close()),\n      ...this.#closing.values(),\n    ]);\n    this.#sockets.clear();\n    this.#leaseSockets.clear();\n    this.#refs.clear();\n    this.#liveSubscriptions.clear();\n    this.#clearGenerations.clear();\n  }\n\n  /** Get the underlying socket for a topic (for testing/inspection). */\n  getSocket(topic: string): UnixSocketPubSub | undefined {\n    return this.#sockets.get(socketKey(this.#dirFor(topic), topic));\n  }\n\n  #canShareDiscovery(): boolean {\n    if (isSafePathSegment(this.#resourceId) && this.#resourceId !== SHARED_SCOPE_DIR) return true;\n    console.warn(\n      `Cross-project agent discovery is disabled: resource id ${JSON.stringify(this.#resourceId)} cannot be used as a directory name, so other projects could not reach this instance.`,\n    );\n    return false;\n  }\n\n  /**\n   * One-shot reply topics close once unused. With shared discovery, so do thread\n   * topics routed to another resource; without it, they behave as before.\n   */\n  #isRefCounted(topic: string): boolean {\n    if (isEphemeralTopic(topic)) return true;\n    if (!this.#sharedPeerDiscovery) return false;\n    const decoded = decodeThreadTopic(topic);\n    if (decoded === undefined) return false;\n    const resourceId = resourceOfThreadKey(decoded);\n    return resourceId !== undefined && resourceId !== this.#resourceId;\n  }\n\n  async #publishTo(\n    topic: string,\n    dir: string,\n    event: Omit<Event, 'id' | 'createdAt'>,\n    options?: { localOnly?: boolean },\n  ): Promise<void> {\n    if (!this.#isRefCounted(topic)) {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.publish(topic, event, options);\n      return;\n    }\n    const key = socketKey(dir, topic);\n    // Retain synchronously so a concurrent release cannot close the socket\n    // this publish is about to use.\n    this.#retain(key);\n    try {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.publish(topic, event, options);\n    } finally {\n      this.#release(key);\n    }\n  }\n\n  async #subscribeTo(topic: string, dir: string, cb: EventCallback, options?: SubscribeOptions): Promise<void> {\n    if (!this.#isRefCounted(topic)) {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.subscribe(topic, cb, options);\n      return;\n    }\n    const key = socketKey(dir, topic);\n    this.#retain(key);\n    const generation = this.#clearGenerations.get(key) ?? 0;\n    try {\n      const socket = await this.#getOrCreate(topic, dir);\n      await socket.subscribe(topic, cb, options);\n      if ((this.#clearGenerations.get(key) ?? 0) !== generation) {\n        // The topic was cleared while this subscribe was in flight.\n        await socket.unsubscribe(topic, cb);\n        return;\n      }\n      let subscriptions = this.#liveSubscriptions.get(key);\n      if (!subscriptions) {\n        subscriptions = new Set();\n        this.#liveSubscriptions.set(key, subscriptions);\n      }\n      if (!subscriptions.has(cb)) {\n        subscriptions.add(cb);\n        this.#retain(key);\n      }\n    } finally {\n      this.#release(key);\n    }\n  }\n\n  async #unsubscribeFrom(topic: string, dir: string, cb: EventCallback): Promise<void> {\n    const key = socketKey(dir, topic);\n    const socket = this.#sockets.get(key);\n    const subscriptions = this.#isRefCounted(topic) ? this.#liveSubscriptions.get(key) : undefined;\n    if (!subscriptions?.delete(cb)) {\n      if (!socket) return;\n      await socket.unsubscribe(topic, cb);\n      return;\n    }\n    if (subscriptions.size === 0) this.#liveSubscriptions.delete(key);\n    try {\n      await socket?.unsubscribe(topic, cb);\n    } finally {\n      this.#release(key);\n    }\n  }\n\n  #leasesFor(resourceId: string): UnixSocketPubSub {\n    let socket = this.#leaseSockets.get(resourceId);\n    if (!socket) {\n      socket = new UnixSocketPubSub(join(this.#rootDir, resourceId, LEASE_SOCKET_NAME));\n      this.#leaseSockets.set(resourceId, socket);\n    }\n    return socket;\n  }\n\n  /** The directory, under the root, that holds a topic's socket. */\n  #dirFor(topic: string): string {\n    if (isOwnerDiscoveryTopic(topic)) return SHARED_SCOPE_DIR;\n    if (this.#sharedPeerDiscovery && isPeerDiscoveryTopic(topic)) return SHARED_SCOPE_DIR;\n    const decoded = decodeThreadTopic(topic);\n    if (decoded !== undefined) return resourceOfThreadKey(decoded) ?? this.#resourceId;\n    return this.#resourceId;\n  }\n\n  #retain(key: string): void {\n    this.#refs.set(key, (this.#refs.get(key) ?? 0) + 1);\n  }\n\n  #release(key: string): void {\n    const refs = (this.#refs.get(key) ?? 0) - 1;\n    if (refs > 0) {\n      this.#refs.set(key, refs);\n      return;\n    }\n    this.#refs.delete(key);\n    this.#clearGenerations.delete(key);\n    this.#liveSubscriptions.delete(key);\n    const socket = this.#sockets.get(key);\n    if (!socket) return;\n    this.#sockets.delete(key);\n    const closing: Promise<void> = socket\n      .close()\n      .catch(() => {})\n      .finally(() => {\n        if (this.#closing.get(key) === closing) this.#closing.delete(key);\n      });\n    this.#closing.set(key, closing);\n  }\n\n  async #getOrCreate(topic: string, dir: string): Promise<UnixSocketPubSub> {\n    if (this.#closed) throw new Error('SignalsPubSub is closed');\n    const key = socketKey(dir, topic);\n    // A socket for this key may still be closing after its last reference\n    // was released; never hand out the closing instance.\n    const closing = this.#closing.get(key);\n    if (closing) {\n      await closing;\n      if (this.#closed) throw new Error('SignalsPubSub is closed');\n    }\n    const existing = this.#sockets.get(key);\n    if (existing) return existing;\n    // Deduplicate concurrent callers so only one socket is created per topic.\n    let inflight = this.#pending.get(key);\n    if (!inflight) {\n      inflight = this.#initSocket(topic, dir, key);\n      this.#pending.set(key, inflight);\n    }\n    const socket = await inflight;\n    if (this.#closed) throw new Error('SignalsPubSub is closed');\n    return socket;\n  }\n\n  async #initSocket(topic: string, dir: string, key: string): Promise<UnixSocketPubSub> {\n    try {\n      const socketPath = await this.#socketPath(topic, dir);\n      if (this.#closed) throw new Error('SignalsPubSub is closed');\n      const socket = new UnixSocketPubSub(socketPath);\n      this.#sockets.set(key, socket);\n      return socket;\n    } finally {\n      this.#pending.delete(key);\n    }\n  }\n\n  async #socketPath(topic: string, scope: string): Promise<string> {\n    let key = topicKey(topic);\n    // A threadId names a file in its resource's directory, so never let it\n    // reach outside that directory, regardless of who owns the thread or\n    // whether cross-project discovery is enabled.\n    if (decodeThreadTopic(topic) !== undefined && !isSafeFileName(key)) {\n      throw new Error('Cannot route an agent thread topic whose threadId is not a safe file name');\n    }\n    const dir = join(this.#rootDir, scope);\n    await mkdir(dir, { recursive: true });\n    const candidate = join(dir, `${key}.sock`);\n    // macOS sun_path limit is 104 bytes; Linux is 108. Use 104 as the\n    // conservative bound. When the path is too long, replace the key with\n    // a short hash so the socket can still be created.\n    if (Buffer.byteLength(candidate) > 104) {\n      key = Buffer.from(await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(key)))\n        .toString('hex')\n        .slice(0, 16);\n      return join(dir, `${key}.sock`);\n    }\n    return candidate;\n  }\n}\n\n/**\n * Creates a per-topic PubSub backed by Unix sockets for cross-process signal\n * and workflow event coordination between mastracode processes.\n *\n * Topics live under `/tmp/mc/<resourceId>/`, except that a thread's stream and\n * leases live under its own resource's directory and thread-owner discovery\n * under `/tmp/mc/_shared/` (see {@link SignalsPubSub}). With\n * `sharedAgentDiscovery`, peer discovery runs there too. Stale sockets from\n * crashed processes are handled by the underlying {@link UnixSocketPubSub}'s\n * broker election logic.\n */\nexport function createSignalsPubSub(resourceId: string, options?: SignalsPubSubOptions): SignalsPubSub {\n  return new SignalsPubSub(resourceId, options);\n}\n"],"mappings":";;;;AAMA,MAAM,sBAAsB;AAC5B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,4BAA4B;AAClC,MAAM,qCAAqC;AAC3C,MAAM,oBAAoB;AAC1B,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,0BAA0B;AAChC,MAAM,eAAe;AACrB,MAAM,wBAAwB,IAAI,OAAO,8CAA8C,aAAa,IAAI,GAAG;AAC3G,MAAM,8BAA8B,IAAI,OAAO,mDAAmD,aAAa,IAAI,GAAG;;;;;AAMtH,SAAS,iBAAiB,OAAwB;CAChD,OAAO,sBAAsB,KAAK,KAAK,KAAK,4BAA4B,KAAK,KAAK;AACpF;AAgBA,SAAS,oBAA4B;CACnC,MAAM,OAAO,QAAQ,IAAI;CACzB,OAAO,QAAQ,WAAW,IAAI,IAAI,OAAO;AAC3C;;;;;AAMA,SAAS,kBAAkB,OAAwB;CACjD,IAAI,CAAC,SAAS,MAAM,SAAS,2BAA2B,UAAU,OAAO,UAAU,MAAM,OAAO;CAChG,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,WAAW,CAAC;EAC9B,IAAI,SAAS,OAAO,SAAS,QAAQ,OAAO,MAAQ,SAAS,KAAM,OAAO;CAC5E;CACA,OAAO;AACT;;AAGA,SAAS,oBAAoB,KAAiC;CAC5D,MAAM,eAAe,IAAI,QAAQ,oBAAoB;CACrD,IAAI,gBAAgB,GAAG,OAAO,KAAA;CAC9B,MAAM,aAAa,IAAI,MAAM,GAAG,YAAY;CAC5C,OAAO,kBAAkB,UAAU,IAAI,aAAa,KAAA;AACtD;;AAGA,SAAS,kBAAkB,OAAmC;CAC5D,IAAI,CAAC,MAAM,WAAW,oBAAoB,GAAG,OAAO,KAAA;CACpD,IAAI;EACF,OAAO,mBAAmB,MAAM,MAAM,EAA2B,CAAC;CACpE,QAAQ;EACN;CACF;AACF;;;;;;AAOA,SAAgB,6BAA6B,YAA4B;CACvE,OAAO,GAAG,qCAAqC;AACjD;;;;;AAMA,SAAS,mBAAmB,KAAiC;CAC3D,IAAI,IAAI,WAAW,kCAAkC,GAAG;EACtD,MAAM,aAAa,IAAI,MAAM,EAAyC;EACtE,OAAO,kBAAkB,UAAU,IAAI,aAAa,KAAA;CACtD;CACA,OAAO,oBACL,IAAI,WAAW,yBAAyB,IAAI,IAAI,MAAM,EAAgC,IAAI,GAC5F;AACF;AAEA,SAAS,sBAAsB,OAAwB;CACrD,OAAO,UAAU,yBAAyB,MAAM,WAAW,GAAG,sBAAsB,EAAE;AACxF;AAEA,SAAS,qBAAqB,OAAwB;CACpD,OAAO,UAAU,wBAAwB,MAAM,WAAW,GAAG,qBAAqB,EAAE;AACtF;;;;;;;;AASA,SAAS,eAAe,OAAwB;CAC9C,IAAI,CAAC,SAAS,UAAU,OAAO,UAAU,QAAQ,GAAG,MAAM,OAAO,YAAY,MAAM,mBAAmB,OAAO;CAC7G,IAAI,qBAAqB,KAAK,KAAK,GAAG,OAAO;CAC7C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,WAAW,CAAC;EAC9B,IAAI,SAAS,OAAO,SAAS,QAAQ,OAAO,MAAQ,SAAS,KAAM,OAAO;CAC5E;CACA,OAAO;AACT;;;;;AAMA,SAAS,SAAS,OAAuB;CACvC,MAAM,UAAU,kBAAkB,KAAK;CACvC,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,eAAe,QAAQ,QAAQ,oBAAoB;EACzD,IAAI,iBAAiB,IAAI,OAAO,QAAQ,MAAM,eAAe,CAAC;CAChE;CACA,OAAO,MAAM,QAAQ,mBAAmB,GAAG;AAC7C;AAEA,SAAS,UAAU,KAAa,OAAuB;CACrD,OAAO,GAAG,IAAI,GAAG,SAAS,KAAK;AACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAM,gBAAN,cAA4B,OAAO;CACjC;CACA;CACA,gCAAyB,IAAI,IAA8B;CAC3D,2BAAoB,IAAI,IAA8B;CACtD,2BAAoB,IAAI,IAAuC;CAC/D,wBAAiB,IAAI,IAAoB;CACzC,qCAA8B,IAAI,IAAgC;CAClE,oCAA6B,IAAI,IAAoB;CACrD,2BAAoB,IAAI,IAA2B;CACnD;CACA;CACA,UAAU;CAEV,YAAY,YAAoB,UAAgC,CAAC,GAAG;EAClE,MAAM;EACN,KAAKA,cAAc;EACnB,KAAKC,WAAW,QAAQ,WAAW,kBAAkB;EACrD,KAAKS,uBAAuB,QAAQ,QAAQ,oBAAoB,KAAK,KAAKC,mBAAmB;EAE7F,KAAKC,WAAW,UAAU;EAC1B,MAAM,SAAS,QAAgB;GAG7B,IAAI,KAAKC,SAAS,MAAM,IAAI,MAAM,yBAAyB;GAC3D,OAAO,KAAKD,WAAW,mBAAmB,GAAG,KAAK,KAAKZ,WAAW;EACpE;EACA,KAAKS,iBAAiB;GACpB,cAAc,OAAO,KAAK,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,aAAa,KAAK,OAAO,KAAK;GACpF,eAAe,OAAM,QAAO,MAAM,GAAG,CAAC,CAAC,cAAc,GAAG;GACxD,cAAc,OAAO,KAAK,UAAU,MAAM,GAAG,CAAC,CAAC,aAAa,KAAK,KAAK;GACtE,YAAY,OAAO,KAAK,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK;GAChF,eAAe,OAAO,KAAK,WAAW,SAAS,UAAU,MAAM,GAAG,CAAC,CAAC,cAAc,KAAK,WAAW,SAAS,KAAK;EAClH;CACF;CAEA,IAAa,iBAAoD;EAC/D,OAAO,CAAC,MAAM;CAChB;;;;;;CAOA,mBAAkC;EAChC,OAAO,KAAKA;CACd;CAEA,MAAM,QACJ,OACA,OACA,SACe;EACf,MAAM,KAAKK,WAAW,OAAO,KAAKC,QAAQ,KAAK,GAAG,OAAO,OAAO;CAClE;CAEA,MAAM,UAAU,OAAe,IAAmB,SAA2C;EAC3F,MAAM,KAAKC,aAAa,OAAO,KAAKD,QAAQ,KAAK,GAAG,IAAI,OAAO;CACjE;CAEA,MAAM,YAAY,OAAe,IAAkC;EACjE,MAAM,KAAKE,iBAAiB,OAAO,KAAKF,QAAQ,KAAK,GAAG,EAAE;CAC5D;;;;;;;CAQA,MAAe,WAAW,OAA8B;EACtD,IAAI,CAAC,iBAAiB,KAAK,GAAG;EAC9B,MAAM,MAAM,UAAU,KAAKA,QAAQ,KAAK,GAAG,KAAK;EAChD,IAAI,CAAC,KAAKV,MAAM,IAAI,GAAG,GAAG;EAC1B,KAAKE,kBAAkB,IAAI,MAAM,KAAKA,kBAAkB,IAAI,GAAG,KAAK,KAAK,CAAC;EAC1E,MAAM,gBAAgB,KAAKD,mBAAmB,IAAI,GAAG;EACrD,IAAI,CAAC,eAAe;EACpB,KAAKA,mBAAmB,OAAO,GAAG;EAClC,KAAK,IAAI,IAAI,GAAG,IAAI,cAAc,MAAM,KAAK,KAAKY,SAAS,GAAG;CAChE;CAEA,MAAM,QAAuB;EAC3B,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAKf,SAAS,OAAO,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC,CAAC;CACnE;CAEA,MAAM,QAAuB;EAC3B,KAAKU,UAAU;EACf,MAAM,QAAQ,WAAW;GACvB,GAAG,CAAC,GAAG,KAAKX,cAAc,OAAO,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC;GACtD,GAAG,CAAC,GAAG,KAAKC,SAAS,OAAO,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,MAAM,CAAC;GACjD,GAAG,KAAKK,SAAS,OAAO;EAC1B,CAAC;EACD,KAAKL,SAAS,MAAM;EACpB,KAAKD,cAAc,MAAM;EACzB,KAAKG,MAAM,MAAM;EACjB,KAAKC,mBAAmB,MAAM;EAC9B,KAAKC,kBAAkB,MAAM;CAC/B;;CAGA,UAAU,OAA6C;EACrD,OAAO,KAAKJ,SAAS,IAAI,UAAU,KAAKY,QAAQ,KAAK,GAAG,KAAK,CAAC;CAChE;CAEA,qBAA8B;EAC5B,IAAI,kBAAkB,KAAKf,WAAW,KAAK,KAAKA,gBAAgB,kBAAkB,OAAO;EACzF,QAAQ,KACN,0DAA0D,KAAK,UAAU,KAAKA,WAAW,EAAE,sFAC7F;EACA,OAAO;CACT;;;;;CAMA,cAAc,OAAwB;EACpC,IAAI,iBAAiB,KAAK,GAAG,OAAO;EACpC,IAAI,CAAC,KAAKU,sBAAsB,OAAO;EACvC,MAAM,UAAU,kBAAkB,KAAK;EACvC,IAAI,YAAY,KAAA,GAAW,OAAO;EAClC,MAAM,aAAa,oBAAoB,OAAO;EAC9C,OAAO,eAAe,KAAA,KAAa,eAAe,KAAKV;CACzD;CAEA,MAAMc,WACJ,OACA,KACA,OACA,SACe;EACf,IAAI,CAAC,KAAKK,cAAc,KAAK,GAAG;GAE9B,OAAM,MADe,KAAKC,aAAa,OAAO,GAAG,EAAA,CACpC,QAAQ,OAAO,OAAO,OAAO;GAC1C;EACF;EACA,MAAM,MAAM,UAAU,KAAK,KAAK;EAGhC,KAAKC,QAAQ,GAAG;EAChB,IAAI;GAEF,OAAM,MADe,KAAKD,aAAa,OAAO,GAAG,EAAA,CACpC,QAAQ,OAAO,OAAO,OAAO;EAC5C,UAAU;GACR,KAAKF,SAAS,GAAG;EACnB;CACF;CAEA,MAAMF,aAAa,OAAe,KAAa,IAAmB,SAA2C;EAC3G,IAAI,CAAC,KAAKG,cAAc,KAAK,GAAG;GAE9B,OAAM,MADe,KAAKC,aAAa,OAAO,GAAG,EAAA,CACpC,UAAU,OAAO,IAAI,OAAO;GACzC;EACF;EACA,MAAM,MAAM,UAAU,KAAK,KAAK;EAChC,KAAKC,QAAQ,GAAG;EAChB,MAAM,aAAa,KAAKd,kBAAkB,IAAI,GAAG,KAAK;EACtD,IAAI;GACF,MAAM,SAAS,MAAM,KAAKa,aAAa,OAAO,GAAG;GACjD,MAAM,OAAO,UAAU,OAAO,IAAI,OAAO;GACzC,KAAK,KAAKb,kBAAkB,IAAI,GAAG,KAAK,OAAO,YAAY;IAEzD,MAAM,OAAO,YAAY,OAAO,EAAE;IAClC;GACF;GACA,IAAI,gBAAgB,KAAKD,mBAAmB,IAAI,GAAG;GACnD,IAAI,CAAC,eAAe;IAClB,gCAAgB,IAAI,IAAI;IACxB,KAAKA,mBAAmB,IAAI,KAAK,aAAa;GAChD;GACA,IAAI,CAAC,cAAc,IAAI,EAAE,GAAG;IAC1B,cAAc,IAAI,EAAE;IACpB,KAAKe,QAAQ,GAAG;GAClB;EACF,UAAU;GACR,KAAKH,SAAS,GAAG;EACnB;CACF;CAEA,MAAMD,iBAAiB,OAAe,KAAa,IAAkC;EACnF,MAAM,MAAM,UAAU,KAAK,KAAK;EAChC,MAAM,SAAS,KAAKd,SAAS,IAAI,GAAG;EACpC,MAAM,gBAAgB,KAAKgB,cAAc,KAAK,IAAI,KAAKb,mBAAmB,IAAI,GAAG,IAAI,KAAA;EACrF,IAAI,CAAC,eAAe,OAAO,EAAE,GAAG;GAC9B,IAAI,CAAC,QAAQ;GACb,MAAM,OAAO,YAAY,OAAO,EAAE;GAClC;EACF;EACA,IAAI,cAAc,SAAS,GAAG,KAAKA,mBAAmB,OAAO,GAAG;EAChE,IAAI;GACF,MAAM,QAAQ,YAAY,OAAO,EAAE;EACrC,UAAU;GACR,KAAKY,SAAS,GAAG;EACnB;CACF;CAEA,WAAW,YAAsC;EAC/C,IAAI,SAAS,KAAKhB,cAAc,IAAI,UAAU;EAC9C,IAAI,CAAC,QAAQ;GACX,SAAS,IAAI,iBAAiB,KAAK,KAAKD,UAAU,YAAY,iBAAiB,CAAC;GAChF,KAAKC,cAAc,IAAI,YAAY,MAAM;EAC3C;EACA,OAAO;CACT;;CAGA,QAAQ,OAAuB;EAC7B,IAAI,sBAAsB,KAAK,GAAG,OAAO;EACzC,IAAI,KAAKQ,wBAAwB,qBAAqB,KAAK,GAAG,OAAO;EACrE,MAAM,UAAU,kBAAkB,KAAK;EACvC,IAAI,YAAY,KAAA,GAAW,OAAO,oBAAoB,OAAO,KAAK,KAAKV;EACvE,OAAO,KAAKA;CACd;CAEA,QAAQ,KAAmB;EACzB,KAAKK,MAAM,IAAI,MAAM,KAAKA,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC;CACpD;CAEA,SAAS,KAAmB;EAC1B,MAAM,QAAQ,KAAKA,MAAM,IAAI,GAAG,KAAK,KAAK;EAC1C,IAAI,OAAO,GAAG;GACZ,KAAKA,MAAM,IAAI,KAAK,IAAI;GACxB;EACF;EACA,KAAKA,MAAM,OAAO,GAAG;EACrB,KAAKE,kBAAkB,OAAO,GAAG;EACjC,KAAKD,mBAAmB,OAAO,GAAG;EAClC,MAAM,SAAS,KAAKH,SAAS,IAAI,GAAG;EACpC,IAAI,CAAC,QAAQ;EACb,KAAKA,SAAS,OAAO,GAAG;EACxB,MAAM,UAAyB,OAC5B,MAAM,CAAC,CACP,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;GACb,IAAI,KAAKK,SAAS,IAAI,GAAG,MAAM,SAAS,KAAKA,SAAS,OAAO,GAAG;EAClE,CAAC;EACH,KAAKA,SAAS,IAAI,KAAK,OAAO;CAChC;CAEA,MAAMY,aAAa,OAAe,KAAwC;EACxE,IAAI,KAAKP,SAAS,MAAM,IAAI,MAAM,yBAAyB;EAC3D,MAAM,MAAM,UAAU,KAAK,KAAK;EAGhC,MAAM,UAAU,KAAKL,SAAS,IAAI,GAAG;EACrC,IAAI,SAAS;GACX,MAAM;GACN,IAAI,KAAKK,SAAS,MAAM,IAAI,MAAM,yBAAyB;EAC7D;EACA,MAAM,WAAW,KAAKV,SAAS,IAAI,GAAG;EACtC,IAAI,UAAU,OAAO;EAErB,IAAI,WAAW,KAAKC,SAAS,IAAI,GAAG;EACpC,IAAI,CAAC,UAAU;GACb,WAAW,KAAKkB,YAAY,OAAO,KAAK,GAAG;GAC3C,KAAKlB,SAAS,IAAI,KAAK,QAAQ;EACjC;EACA,MAAM,SAAS,MAAM;EACrB,IAAI,KAAKS,SAAS,MAAM,IAAI,MAAM,yBAAyB;EAC3D,OAAO;CACT;CAEA,MAAMS,YAAY,OAAe,KAAa,KAAwC;EACpF,IAAI;GACF,MAAM,aAAa,MAAM,KAAKC,YAAY,OAAO,GAAG;GACpD,IAAI,KAAKV,SAAS,MAAM,IAAI,MAAM,yBAAyB;GAC3D,MAAM,SAAS,IAAI,iBAAiB,UAAU;GAC9C,KAAKV,SAAS,IAAI,KAAK,MAAM;GAC7B,OAAO;EACT,UAAU;GACR,KAAKC,SAAS,OAAO,GAAG;EAC1B;CACF;CAEA,MAAMmB,YAAY,OAAe,OAAgC;EAC/D,IAAI,MAAM,SAAS,KAAK;EAIxB,IAAI,kBAAkB,KAAK,MAAM,KAAA,KAAa,CAAC,eAAe,GAAG,GAC/D,MAAM,IAAI,MAAM,2EAA2E;EAE7F,MAAM,MAAM,KAAK,KAAKtB,UAAU,KAAK;EACrC,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;EACpC,MAAM,YAAY,KAAK,KAAK,GAAG,IAAI,MAAM;EAIzC,IAAI,OAAO,WAAW,SAAS,IAAI,KAAK;GACtC,MAAM,OAAO,KAAK,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAC/F,SAAS,KAAK,CAAC,CACf,MAAM,GAAG,EAAE;GACd,OAAO,KAAK,KAAK,GAAG,IAAI,MAAM;EAChC;EACA,OAAO;CACT;AACF;;;;;;;;;;;;AAaA,SAAgB,oBAAoB,YAAoB,SAA+C;CACrG,OAAO,IAAI,cAAc,YAAY,OAAO;AAC9C"}

package/dist/utils/slash-command-processor.js

@@ -1,6 +1,6 @@
 import * as path$1 from "path";
-import { execSync } from "child_process";
 import { promises } from "fs";
+import { execSync } from "child_process";
 //#region src/utils/slash-command-processor.ts
 /**
 * Process a slash command by replacing variables and executing shell commands

package/dist/utils/update-check.js

@@ -1,6 +1,6 @@
 import { dirname, join, resolve, sep } from "path";
-import { execFile } from "child_process";
 import { readFileSync, realpathSync } from "fs";
+import { execFile } from "child_process";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
 //#region src/utils/update-check.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/code-sdk",
-  "version": "1.11.0-alpha.3",
+  "version": "1.11.0-alpha.5",
   "description": "Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it",
   "type": "module",
   "publishConfig": {
@@ -63,19 +63,19 @@
     "yaml": "^2.7.1",
     "zod": "^4.6.4",
     "@mastra/agent-browser": "0.5.3",
-    "@mastra/core": "1.75.0-alpha.3",
-    "@mastra/duckdb": "1.13.0-alpha.1",
-    "@mastra/libsql": "1.25.1-alpha.0",
-    "@mastra/mcp": "2.2.0-alpha.0",
     "@mastra/fastembed": "1.3.2",
+    "@mastra/github-signals": "0.5.1",
+    "@mastra/mcp": "2.2.0-alpha.0",
+    "@mastra/libsql": "1.25.1-alpha.0",
+    "@mastra/duckdb": "1.13.0-alpha.1",
     "@mastra/memory": "1.36.0-alpha.2",
-    "@mastra/observability": "1.18.3",
     "@mastra/pg": "1.30.0-alpha.2",
-    "@mastra/github-signals": "0.5.1",
-    "@mastra/schema-compat": "1.3.13",
+    "@mastra/observability": "1.18.3",
     "@mastra/parallel": "0.1.2",
+    "@mastra/stagehand": "0.3.5",
+    "@mastra/schema-compat": "1.3.13",
     "@mastra/tavily": "1.1.2",
-    "@mastra/stagehand": "0.3.5"
+    "@mastra/core": "1.75.0-alpha.3"
   },
   "devDependencies": {
     "@libsql/client": "^0.18.0",
@@ -87,8 +87,8 @@
     "typescript-eslint": "^8.57.0",
     "vitest": "4.1.11",
     "@internal/lint": "0.0.140",
-    "@internal/workspace-test-utils": "0.0.84",
-    "@internal/types-builder": "0.0.115"
+    "@internal/types-builder": "0.0.115",
+    "@internal/workspace-test-utils": "0.0.84"
   },
   "engines": {
     "node": ">=22.19.0"