@mastra/code-sdk 1.11.0 → 1.12.0-alpha.1

package/dist/agents/mastracode-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"mastracode-gateway.js","names":["#mastraGateway","#mastraGatewayBaseUrl","#mastraGatewayApiKey","#routeThroughMastraGateway","#thinkingLevel","#anthropicPromptCacheScope","#customProviders","#settingsPath","#credentials","#getCustomProviders","#resolveAnthropicModel","#resolveOpenAIModel","#resolveGoogleModel"],"sources":["../../src/agents/mastracode-gateway.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport { createOpenAI } from '@ai-sdk/openai';\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { CustomAvailableModel, CustomModelCatalogProvider } from '@mastra/core/agent-controller';\nimport {\n  GATEWAY_AUTH_HEADER,\n  MastraGateway,\n  MastraModelGateway,\n  ModelRouterLanguageModel,\n  PROVIDER_REGISTRY,\n} from '@mastra/core/llm';\nimport type {\n  GatewayAuthRequest,\n  GatewayAuthResult,\n  GatewayLanguageModel,\n  MastraModelGatewayInterface,\n  ProviderConfig,\n} from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { getCustomProviderId, loadSettings, MASTRA_GATEWAY_PROVIDER } from '../onboarding/settings.js';\nimport type { AnthropicPromptCacheScope } from '../providers/anthropic-prompt-cache.js';\nimport {\n  buildAnthropicOAuthFetch,\n  claudeCodeMiddleware,\n  createAnthropicThinkingMiddleware,\n  createPromptCacheMiddleware,\n  opencodeClaudeMaxProvider,\n} from '../providers/claude-max.js';\nimport { getCopilotModelCatalog, githubCopilotProvider } from '../providers/github-copilot.js';\nimport { createGoogleThinkingMiddleware } from '../providers/google-thinking.js';\nimport { KIMI_CODING_MODELS, kimiCodingProvider } from '../providers/kimi-coding.js';\nimport {\n  normalizeAnthropicModelId,\n  OPENAI_PREFIX,\n  remapOpenAIModelForCodexOAuth,\n  stripMastraGatewayPrefix,\n} from '../providers/model-ids.js';\nimport {\n  buildOpenAICodexOAuthFetch,\n  createCodexMiddleware,\n  createReasoningEffortMiddleware,\n  getEffectiveThinkingLevel,\n  openaiCodexProvider,\n  THINKING_LEVEL_TO_REASONING_EFFORT,\n} from '../providers/openai-codex.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { xaiProvider } from '../providers/xai.js';\nimport { getAppDataDir } from '../utils/project.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\n\nexport {\n  MASTRA_GATEWAY_PREFIX,\n  OPENAI_PREFIX,\n  remapOpenAIModelForCodexOAuth,\n  stripMastraGatewayPrefix,\n} from '../providers/model-ids.js';\n\nexport const MASTRACODE_GATEWAY_ID = 'mastracode';\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport type MastraCodeCustomProvider = { name: string; url: string; apiKey?: string; models?: string[] };\n\nexport type MastraCodeGatewayOptions = {\n  mastraGatewayBaseUrl: string;\n  mastraGatewayApiKey?: string;\n  routeThroughMastraGateway: boolean;\n  thinkingLevel?: ThinkingLevel;\n  /** Anthropic prompt-cache breakpoints to write. Defaults to `conversation`. */\n  anthropicPromptCacheScope?: AnthropicPromptCacheScope;\n  customProviders?: MastraCodeCustomProvider[];\n  settingsPath?: string;\n  /**\n   * Per-tenant credential source for this gateway instance. Defaults to the\n   * server-global file-backed `AuthStorage`; deployed web passes the calling\n   * tenant's store so model calls use the caller's own credentials.\n   */\n  credentialStore?: CredentialStore;\n};\n\n/**\n * Global file-backed credential store for local (TUI) model resolution.\n *\n * Constructed lazily, NOT at module scope: `AuthStorage`'s default path is\n * resolved from `MASTRA_APP_DATA_DIR` at construction, and this module is\n * routinely imported before test harnesses / embedders point that variable at\n * an isolated directory — an import-time construction would permanently pin\n * the developer's real app-data dir for every credential read.\n */\nlet authStorageSingleton: AuthStorage | undefined;\nlet authStorageSingletonDir: string | undefined;\n\nexport function getGlobalAuthStorage(): AuthStorage {\n  // Keyed by the resolved app-data dir: in-process harnesses re-point\n  // MASTRA_APP_DATA_DIR per run inside one long-lived worker, so a store\n  // pinned to a previous dir must be discarded, not reused.\n  const dir = getAppDataDir();\n  if (!authStorageSingleton || authStorageSingletonDir !== dir) {\n    authStorageSingleton = new AuthStorage();\n    authStorageSingletonDir = dir;\n  }\n  return authStorageSingleton;\n}\n\nexport function reloadAuthStorage() {\n  getGlobalAuthStorage().reload();\n}\n\n/**\n * Resolve the Anthropic API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getAnthropicApiKey(credentials: CredentialStore = getGlobalAuthStorage()): string | undefined {\n  const storedCred = credentials.get('anthropic');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('anthropic')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false\n    ? undefined\n    : process.env.ANTHROPIC_API_KEY?.trim() || undefined;\n}\n\n/**\n * Resolve the OpenAI API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getOpenAIApiKey(credentials: CredentialStore = getGlobalAuthStorage()): string | undefined {\n  const storedCred = credentials.get('openai-codex');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('openai-codex')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false ? undefined : process.env.OPENAI_API_KEY?.trim() || undefined;\n}\n\nfunction anthropicApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers: ModelRequestHeaders | undefined,\n  thinkingLevel: ThinkingLevel | undefined,\n  promptCacheScope: AnthropicPromptCacheScope,\n) {\n  const anthropic = createAnthropic({ apiKey, headers });\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, thinkingLevel);\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [createPromptCacheMiddleware(promptCacheScope), ...(thinkingMiddleware ? [thinkingMiddleware] : [])],\n  });\n}\n\nfunction openaiApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers?: ModelRequestHeaders,\n  thinkingLevel?: ThinkingLevel,\n) {\n  const openai = createOpenAI({ apiKey, baseURL: process.env.OPENAI_BASE_URL, headers });\n  const middleware =\n    thinkingLevel && thinkingLevel !== 'off'\n      ? createReasoningEffortMiddleware(\n          'openai',\n          THINKING_LEVEL_TO_REASONING_EFFORT[getEffectiveThinkingLevel(modelId, thinkingLevel)],\n        )\n      : undefined;\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: middleware ? [middleware] : [],\n  });\n}\n\nfunction getAuthProviderId(providerId: string): string {\n  return providerId === 'openai' ? 'openai-codex' : providerId;\n}\n\nfunction getProviderAuthKey(\n  providerId: string,\n  credentials: CredentialStore = getGlobalAuthStorage(),\n): string | undefined {\n  const authProviderId = getAuthProviderId(providerId);\n  const storedCred = credentials.get(authProviderId);\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey(authProviderId)?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  if (credentials.allowEnvironmentFallback === false) return undefined;\n  return authProviderId === 'kimi-for-coding' ? process.env.KIMI_API_KEY?.trim() || undefined : undefined;\n}\n\nexport function resolveAuth(request: GatewayAuthRequest, mastraGatewayApiKey?: string): GatewayAuthResult | undefined {\n  return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);\n}\n\nfunction getGatewayProviderKey(gatewayId: string, providerId: string): string {\n  if (gatewayId === 'models.dev') return providerId;\n  return providerId === gatewayId ? gatewayId : `${gatewayId}/${providerId}`;\n}\n\nfunction parseGatewayRouterId(\n  routerId: string,\n  gateway: MastraModelGatewayInterface,\n): { gatewayId: string; providerId: string; modelId: string } {\n  const [firstPart = '', secondPart = '', ...restParts] = routerId.split('/');\n  const gatewayId = gateway.id;\n\n  if (firstPart === gatewayId && secondPart) {\n    return {\n      gatewayId,\n      providerId: secondPart,\n      modelId: restParts.join('/'),\n    };\n  }\n\n  return {\n    gatewayId,\n    providerId: firstPart,\n    modelId: [secondPart, ...restParts].filter(Boolean).join('/'),\n  };\n}\n\nfunction hasResolvedAuth(auth: GatewayAuthResult | undefined): boolean {\n  if (!auth) return false;\n  if (auth.apiKey || auth.bearerToken) return true;\n  return auth.headers ? Object.keys(auth.headers).length > 0 : false;\n}\n\nasync function resolveGatewayProviderAuth(\n  gateway: MastraModelGatewayInterface,\n  routerId: string,\n): Promise<GatewayAuthResult | undefined> {\n  if (!gateway.resolveAuth) return undefined;\n\n  const parsed = parseGatewayRouterId(routerId, gateway);\n  try {\n    const result = await gateway.resolveAuth({\n      gatewayId: parsed.gatewayId,\n      providerId: parsed.providerId,\n      modelId: parsed.modelId,\n      routerId,\n    });\n    return hasResolvedAuth(result) ? result : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getMastraCodeProviderConfigs(\n  gateway: MastraModelGatewayInterface,\n): Promise<Record<string, ProviderConfig>> {\n  const providers: Record<string, ProviderConfig> = { ...(PROVIDER_REGISTRY as Record<string, ProviderConfig>) };\n\n  try {\n    const gatewayProviders = await gateway.fetchProviders();\n    for (const [providerId, config] of Object.entries(gatewayProviders)) {\n      providers[getGatewayProviderKey(gateway.id, providerId)] = {\n        ...config,\n        gateway: gateway.id,\n      };\n    }\n  } catch (error) {\n    console.warn(`Failed to load providers from gateway ${gateway.id}:`, error);\n  }\n\n  return providers;\n}\n\nfunction getApiKeyEnvVar(providerConfig: Pick<ProviderConfig, 'apiKeyEnvVar'> | undefined): string | undefined {\n  const envVars = providerConfig?.apiKeyEnvVar;\n  return Array.isArray(envVars) ? envVars[0] : envVars;\n}\n\nexport class MastraCodeGateway extends MastraModelGateway {\n  readonly id = MASTRACODE_GATEWAY_ID;\n  readonly name = 'MastraCode Gateway';\n\n  readonly #mastraGateway: MastraGateway;\n  readonly #mastraGatewayBaseUrl: string;\n  readonly #mastraGatewayApiKey?: string;\n  readonly #routeThroughMastraGateway: boolean;\n  readonly #thinkingLevel?: ThinkingLevel;\n  readonly #anthropicPromptCacheScope: AnthropicPromptCacheScope;\n  readonly #customProviders?: MastraCodeCustomProvider[];\n  readonly #settingsPath?: string;\n  readonly #credentials: CredentialStore;\n\n  constructor({\n    mastraGatewayBaseUrl,\n    mastraGatewayApiKey,\n    routeThroughMastraGateway,\n    thinkingLevel,\n    anthropicPromptCacheScope,\n    customProviders,\n    settingsPath,\n    credentialStore,\n  }: MastraCodeGatewayOptions) {\n    super();\n    this.#mastraGateway = new MastraGateway({ baseUrl: mastraGatewayBaseUrl });\n    this.#mastraGatewayBaseUrl = mastraGatewayBaseUrl;\n    this.#mastraGatewayApiKey = mastraGatewayApiKey;\n    this.#routeThroughMastraGateway = routeThroughMastraGateway;\n    this.#thinkingLevel = thinkingLevel;\n    this.#anthropicPromptCacheScope = anthropicPromptCacheScope ?? 'conversation';\n    this.#customProviders = customProviders;\n    this.#settingsPath = settingsPath;\n    this.#credentials = credentialStore ?? getGlobalAuthStorage();\n  }\n\n  static getMastraGatewayApiKey(): string | undefined {\n    return getGlobalAuthStorage().getStoredApiKey(MASTRA_GATEWAY_PROVIDER) ?? process.env['MASTRA_GATEWAY_API_KEY'];\n  }\n\n  /** @deprecated Renamed to {@link MastraCodeGateway.getMastraGatewayApiKey}. */\n  static getMemoryGatewayApiKey(): string | undefined {\n    return MastraCodeGateway.getMastraGatewayApiKey();\n  }\n\n  /**\n   * Claim an unprefixed model id (e.g. a bare `anthropic/...`) when this gateway\n   * can authenticate it via OAuth or a stored/env credential. This lets the\n   * shared gateway router select MastraCode for auth resolution, so the status\n   * bar and `/api-keys` reflect OAuth logins instead of only checking env vars.\n   */\n  handlesModel(modelId: string): boolean {\n    const parsed = parseGatewayRouterId(modelId, this);\n    if (!parsed.providerId || !parsed.modelId) return false;\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) return true;\n    const customProvider = this.#getCustomProviders().find(\n      provider => parsed.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) return true;\n    return hasResolvedAuth(\n      MastraCodeGateway.resolveProviderAuth(\n        {\n          gatewayId: this.id,\n          providerId: parsed.providerId,\n          modelId: parsed.modelId,\n          routerId: modelId,\n        },\n        undefined,\n        this.#credentials,\n      ),\n    );\n  }\n\n  static resolveProviderAuth(\n    request: GatewayAuthRequest,\n    mastraGatewayApiKey?: string,\n    credentials: CredentialStore = getGlobalAuthStorage(),\n  ): GatewayAuthResult | undefined {\n    if (request.gatewayId === 'mastra' && mastraGatewayApiKey) {\n      return { apiKey: mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const authProviderId = getAuthProviderId(request.providerId);\n    const storedCred = credentials.get(authProviderId);\n    if (storedCred?.type === 'oauth') {\n      return { bearerToken: 'oauth', source: 'gateway' };\n    }\n\n    const apiKey = getProviderAuthKey(request.providerId, credentials);\n    return apiKey ? { apiKey, source: 'gateway' } : undefined;\n  }\n\n  static createModelCatalogProvider(gateway: MastraModelGatewayInterface): CustomModelCatalogProvider {\n    return async () => {\n      const registry = await getMastraCodeProviderConfigs(gateway);\n      const models: CustomAvailableModel[] = [];\n\n      for (const [provider, providerConfig] of Object.entries(registry)) {\n        const apiKeyEnvVar = getApiKeyEnvVar(providerConfig);\n        const hasEnvKey = apiKeyEnvVar ? Boolean(process.env[apiKeyEnvVar]) : false;\n        const modelNames = providerConfig.models;\n        if (!Array.isArray(modelNames)) continue;\n\n        const gatewayAuth = modelNames[0]\n          ? await resolveGatewayProviderAuth(gateway, `${provider}/${modelNames[0]}`)\n          : undefined;\n\n        for (const modelName of modelNames) {\n          const id = `${provider}/${modelName}`;\n          models.push({\n            id,\n            provider,\n            modelName,\n            hasApiKey: hasEnvKey || Boolean(gatewayAuth),\n            apiKeyEnvVar: apiKeyEnvVar || undefined,\n          });\n        }\n      }\n\n      return models;\n    };\n  }\n\n  createModelCatalogProvider(): CustomModelCatalogProvider {\n    return MastraCodeGateway.createModelCatalogProvider(this);\n  }\n\n  #getCustomProviders(): MastraCodeCustomProvider[] {\n    // Explicit constructor list wins; then a registered source (deployed web,\n    // DB-backed — authoritative, so settings.json is never consulted); then\n    // the local file-backed settings.\n    return this.#customProviders ?? resolveCustomProviders() ?? loadSettings(this.#settingsPath).customProviders;\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    for (const provider of this.#getCustomProviders()) {\n      const models = provider.models ?? [];\n      if (!models.length) continue;\n      providers[getCustomProviderId(provider.name)] = {\n        name: provider.name,\n        url: provider.url,\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models,\n      };\n    }\n\n    providers['kimi-for-coding'] = {\n      name: 'Kimi For Coding',\n      apiKeyEnvVar: 'KIMI_API_KEY',\n      apiKeyHeader: 'Authorization',\n      gateway: this.id,\n      models: [...KIMI_CODING_MODELS],\n    };\n\n    try {\n      const copilotModels = await getCopilotModelCatalog({ authStorage: this.#credentials });\n      providers['github-copilot'] = {\n        name: 'GitHub Copilot',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: copilotModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load GitHub Copilot model catalog:', error);\n    }\n\n    return providers;\n  }\n\n  buildUrl(modelId: string): string | undefined | Promise<string | undefined> {\n    return this.#routeThroughMastraGateway ? this.#mastraGateway.buildUrl(modelId) : modelId;\n  }\n\n  async getApiKey(modelId: string): Promise<string> {\n    const providerId = stripMastraGatewayPrefix(modelId).split('/', 1)[0];\n    if (this.#routeThroughMastraGateway) return this.#mastraGatewayApiKey ?? '';\n    return providerId ? (getProviderAuthKey(providerId, this.#credentials) ?? '') : '';\n  }\n\n  resolveAuth(request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) {\n      return { apiKey: this.#mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const customProvider = this.#getCustomProviders().find(\n      provider => request.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) {\n      return { apiKey: customProvider.apiKey, source: 'gateway' };\n    }\n\n    return MastraCodeGateway.resolveProviderAuth(request, undefined, this.#credentials);\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const customProvider = this.#getCustomProviders().find(\n      provider => args.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider) {\n      const provider = createOpenAICompatible({\n        name: args.providerId,\n        baseURL: customProvider.url,\n        apiKey: args.apiKey,\n        headers: args.headers,\n      });\n      const reasoningEffort = this.#thinkingLevel ? THINKING_LEVEL_TO_REASONING_EFFORT[this.#thinkingLevel] : undefined;\n      const middleware = createReasoningEffortMiddleware(args.providerId, reasoningEffort);\n      if (!middleware) {\n        return provider.chatModel(args.modelId) as unknown as GatewayLanguageModel;\n      }\n      return wrapLanguageModel({\n        model: provider.chatModel(args.modelId),\n        middleware: [middleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'github-copilot') {\n      return githubCopilotProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'moonshotai') {\n      // Prefer the gateway-resolved key (stored credentials), then the canonical\n      // registry env var. Keep the legacy typo name as a fallback for anyone who\n      // set it because of the previous error message.\n      const apiKey =\n        args.apiKey?.trim() || process.env.MOONSHOT_API_KEY?.trim() || process.env.MOONSHOT_AI_API_KEY?.trim();\n      if (!apiKey) {\n        throw new Error('Need MOONSHOT_API_KEY');\n      }\n      return createAnthropic({\n        apiKey,\n        baseURL: 'https://api.moonshot.ai/anthropic/v1',\n        name: 'moonshotai.anthropicv1',\n        headers: args.headers,\n      })(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'anthropic') {\n      return this.#resolveAnthropicModel(args);\n    }\n\n    if (args.providerId === 'openai') {\n      const openaiModel = this.#resolveOpenAIModel(args);\n      if (openaiModel) return openaiModel;\n    }\n\n    if (args.providerId === 'xai' && this.#credentials.get('xai')?.type === 'oauth') {\n      return xaiProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'google') {\n      return this.#resolveGoogleModel(args);\n    }\n\n    if (this.#routeThroughMastraGateway) {\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'kimi-for-coding') {\n      return kimiCodingProvider(args.modelId, {\n        apiKey: args.apiKey,\n        headers: args.headers,\n        credentialStore: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    return new ModelRouterLanguageModel({\n      id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n      apiKey: args.apiKey,\n      headers: args.headers,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveAnthropicModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const bareModelId = normalizeAnthropicModelId(args.modelId);\n    const storedCred = this.#credentials.get('anthropic');\n    const thinkingMiddleware = createAnthropicThinkingMiddleware(bareModelId, this.#thinkingLevel);\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const anthropic = createAnthropic({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildAnthropicOAuthFetch({ authStorage: this.#credentials }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: anthropic(bareModelId),\n          middleware: [\n            claudeCodeMiddleware,\n            createPromptCacheMiddleware(this.#anthropicPromptCacheScope),\n            ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n          ],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      const gatewayModel = this.#mastraGateway.resolveLanguageModel({\n        ...args,\n        modelId: bareModelId,\n      }) as GatewayLanguageModel;\n      if (!thinkingMiddleware) return gatewayModel;\n      return wrapLanguageModel({\n        model: gatewayModel as any,\n        middleware: [thinkingMiddleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      return opencodeClaudeMaxProvider(bareModelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n        thinkingLevel: this.#thinkingLevel,\n        promptCacheScope: this.#anthropicPromptCacheScope,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        storedCred.key.trim(),\n        args.headers,\n        this.#thinkingLevel,\n        this.#anthropicPromptCacheScope,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getAnthropicApiKey(this.#credentials);\n    if (apiKey) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n        this.#anthropicPromptCacheScope,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    // No stored credentials: use the OAuth-backed provider so the first request can trigger login.\n    return opencodeClaudeMaxProvider(bareModelId, {\n      headers: args.headers,\n      authStorage: this.#credentials,\n      thinkingLevel: this.#thinkingLevel,\n      promptCacheScope: this.#anthropicPromptCacheScope,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveOpenAIModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel | undefined {\n    const storedCred = this.#credentials.get('openai-codex');\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n        const resolvedBareModelId = resolvedModelId.substring(OPENAI_PREFIX.length);\n        const requestedLevel: ThinkingLevel = this.#thinkingLevel ?? 'medium';\n        const effectiveLevel = getEffectiveThinkingLevel(resolvedBareModelId, requestedLevel);\n        const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n        const middleware = createCodexMiddleware(reasoningEffort);\n        const openai = createOpenAI({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildOpenAICodexOAuthFetch({ authStorage: this.#credentials, rewriteUrl: false }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: openai.responses(resolvedBareModelId),\n          middleware: [middleware],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n      return openaiCodexProvider(resolvedModelId.substring(OPENAI_PREFIX.length), {\n        thinkingLevel: this.#thinkingLevel,\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getOpenAIApiKey(this.#credentials);\n    if (apiKey) {\n      return openaiApiKeyProvider(\n        args.modelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    return undefined;\n  }\n\n  #resolveGoogleModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const baseModel = this.#routeThroughMastraGateway\n      ? (this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel)\n      : (new ModelRouterLanguageModel({\n          id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n          apiKey: args.apiKey,\n          headers: args.headers,\n        }) as unknown as GatewayLanguageModel);\n\n    const thinkingMiddleware = createGoogleThinkingMiddleware(args.modelId, this.#thinkingLevel);\n    if (!thinkingMiddleware) return baseModel;\n\n    return wrapLanguageModel({\n      model: baseModel as any,\n      middleware: [thinkingMiddleware],\n    }) as unknown as GatewayLanguageModel;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2DA,MAAa,wBAAwB;;;;;;;;;;AAgCrC,IAAI;AACJ,IAAI;AAEJ,SAAgB,uBAAoC;CAIlD,MAAM,MAAM,cAAc;CAC1B,IAAI,CAAC,wBAAwB,4BAA4B,KAAK;EAC5D,uBAAuB,IAAI,YAAY;EACvC,0BAA0B;CAC5B;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB;CAClC,qBAAqB,CAAC,CAAC,OAAO;AAChC;;;;;AAMA,SAAgB,mBAAmB,cAA+B,qBAAqB,GAAuB;CAC5G,MAAM,aAAa,YAAY,IAAI,WAAW;CAC9C,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,WAAW,CAAC,EAAE,KAAK;CACpE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAC5C,KAAA,IACA,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAA;AAC/C;;;;;AAMA,SAAgB,gBAAgB,cAA+B,qBAAqB,GAAuB;CACzG,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAAQ,KAAA,IAAY,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC5G;AAEA,SAAS,wBACP,SACA,QACA,SACA,eACA,kBACA;CACA,MAAM,YAAY,gBAAgB;EAAE;EAAQ;CAAQ,CAAC;CACrD,MAAM,qBAAqB,kCAAkC,SAAS,aAAa;CACnF,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB,YAAY,CAAC,4BAA4B,gBAAgB,GAAG,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC,CAAE;CACjH,CAAC;AACH;AAEA,SAAS,qBACP,SACA,QACA,SACA,eACA;CACA,MAAM,SAAS,aAAa;EAAE;EAAQ,SAAS,QAAQ,IAAI;EAAiB;CAAQ,CAAC;CACrF,MAAM,aACJ,iBAAiB,kBAAkB,QAC/B,gCACE,UACA,mCAAmC,0BAA0B,SAAS,aAAa,EACrF,IACA,KAAA;CACN,OAAO,kBAAkB;EACvB,OAAO,OAAO,UAAU,OAAO;EAC/B,YAAY,aAAa,CAAC,UAAU,IAAI,CAAC;CAC3C,CAAC;AACH;AAEA,SAAS,kBAAkB,YAA4B;CACrD,OAAO,eAAe,WAAW,iBAAiB;AACpD;AAEA,SAAS,mBACP,YACA,cAA+B,qBAAqB,GAChC;CACpB,MAAM,iBAAiB,kBAAkB,UAAU;CACnD,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,IAAI,YAAY,6BAA6B,OAAO,OAAO,KAAA;CAC3D,OAAO,mBAAmB,oBAAoB,QAAQ,IAAI,cAAc,KAAK,KAAK,KAAA,IAAY,KAAA;AAChG;AAEA,SAAgB,YAAY,SAA6B,qBAA6D;CACpH,OAAO,kBAAkB,oBAAoB,SAAS,mBAAmB;AAC3E;AAEA,SAAS,sBAAsB,WAAmB,YAA4B;CAC5E,IAAI,cAAc,cAAc,OAAO;CACvC,OAAO,eAAe,YAAY,YAAY,GAAG,UAAU,GAAG;AAChE;AAEA,SAAS,qBACP,UACA,SAC4D;CAC5D,MAAM,CAAC,YAAY,IAAI,aAAa,IAAI,GAAG,aAAa,SAAS,MAAM,GAAG;CAC1E,MAAM,YAAY,QAAQ;CAE1B,IAAI,cAAc,aAAa,YAC7B,OAAO;EACL;EACA,YAAY;EACZ,SAAS,UAAU,KAAK,GAAG;CAC7B;CAGF,OAAO;EACL;EACA,YAAY;EACZ,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG;CAC9D;AACF;AAEA,SAAS,gBAAgB,MAA8C;CACrE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,UAAU,KAAK,aAAa,OAAO;CAC5C,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI;AAC/D;AAEA,eAAe,2BACb,SACA,UACwC;CACxC,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAA;CAEjC,MAAM,SAAS,qBAAqB,UAAU,OAAO;CACrD,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,YAAY;GACvC,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB;EACF,CAAC;EACD,OAAO,gBAAgB,MAAM,IAAI,SAAS,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;AAEA,eAAe,6BACb,SACyC;CACzC,MAAM,YAA4C,EAAE,GAAI,kBAAqD;CAE7G,IAAI;EACF,MAAM,mBAAmB,MAAM,QAAQ,eAAe;EACtD,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QAAQ,gBAAgB,GAChE,UAAU,sBAAsB,QAAQ,IAAI,UAAU,KAAK;GACzD,GAAG;GACH,SAAS,QAAQ;EACnB;CAEJ,SAAS,OAAO;EACd,QAAQ,KAAK,yCAAyC,QAAQ,GAAG,IAAI,KAAK;CAC5E;CAEA,OAAO;AACT;AAEA,SAAS,gBAAgB,gBAAsF;CAC7G,MAAM,UAAU,gBAAgB;CAChC,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAC/C;AAEA,IAAa,oBAAb,MAAa,0BAA0B,mBAAmB;CACxD,KAAc;CACd,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,sBACA,qBACA,2BACA,eACA,2BACA,iBACA,cACA,mBAC2B;EAC3B,MAAM;EACN,KAAKA,iBAAiB,IAAI,cAAc,EAAE,SAAS,qBAAqB,CAAC;EACzE,KAAKC,wBAAwB;EAC7B,KAAKC,uBAAuB;EAC5B,KAAKC,6BAA6B;EAClC,KAAKC,iBAAiB;EACtB,KAAKC,6BAA6B,6BAA6B;EAC/D,KAAKC,mBAAmB;EACxB,KAAKC,gBAAgB;EACrB,KAAKC,eAAe,mBAAmB,qBAAqB;CAC9D;CAEA,OAAO,yBAA6C;EAClD,OAAO,qBAAqB,CAAC,CAAC,gBAAA,gBAAuC,KAAK,QAAQ,IAAI;CACxF;;CAGA,OAAO,yBAA6C;EAClD,OAAO,kBAAkB,uBAAuB;CAClD;;;;;;;CAQA,aAAa,SAA0B;EACrC,MAAM,SAAS,qBAAqB,SAAS,IAAI;EACjD,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,SAAS,OAAO;EAClD,IAAI,KAAKL,8BAA8B,KAAKD,sBAAsB,OAAO;EAIzE,IAHuB,KAAKO,oBAAoB,CAAC,CAAC,MAChD,aAAY,OAAO,eAAe,oBAAoB,SAAS,IAAI,CAEpD,CAAC,EAAE,QAAQ,OAAO;EACnC,OAAO,gBACL,kBAAkB,oBAChB;GACE,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB,UAAU;EACZ,GACA,KAAA,GACA,KAAKD,YACP,CACF;CACF;CAEA,OAAO,oBACL,SACA,qBACA,cAA+B,qBAAqB,GACrB;EAC/B,IAAI,QAAQ,cAAc,YAAY,qBACpC,OAAO;GAAE,QAAQ;GAAqB,QAAQ;EAAU;EAG1D,MAAM,iBAAiB,kBAAkB,QAAQ,UAAU;EAE3D,IADmB,YAAY,IAAI,cACtB,CAAC,EAAE,SAAS,SACvB,OAAO;GAAE,aAAa;GAAS,QAAQ;EAAU;EAGnD,MAAM,SAAS,mBAAmB,QAAQ,YAAY,WAAW;EACjE,OAAO,SAAS;GAAE;GAAQ,QAAQ;EAAU,IAAI,KAAA;CAClD;CAEA,OAAO,2BAA2B,SAAkE;EAClG,OAAO,YAAY;GACjB,MAAM,WAAW,MAAM,6BAA6B,OAAO;GAC3D,MAAM,SAAiC,CAAC;GAExC,KAAK,MAAM,CAAC,UAAU,mBAAmB,OAAO,QAAQ,QAAQ,GAAG;IACjE,MAAM,eAAe,gBAAgB,cAAc;IACnD,MAAM,YAAY,eAAe,QAAQ,QAAQ,IAAI,aAAa,IAAI;IACtE,MAAM,aAAa,eAAe;IAClC,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;IAEhC,MAAM,cAAc,WAAW,KAC3B,MAAM,2BAA2B,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI,IACxE,KAAA;IAEJ,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,KAAK,GAAG,SAAS,GAAG;KAC1B,OAAO,KAAK;MACV;MACA;MACA;MACA,WAAW,aAAa,QAAQ,WAAW;MAC3C,cAAc,gBAAgB,KAAA;KAChC,CAAC;IACH;GACF;GAEA,OAAO;EACT;CACF;CAEA,6BAAyD;EACvD,OAAO,kBAAkB,2BAA2B,IAAI;CAC1D;CAEA,sBAAkD;EAIhD,OAAO,KAAKF,oBAAoB,uBAAuB,KAAK,aAAa,KAAKC,aAAa,CAAC,CAAC;CAC/F;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,KAAK,MAAM,YAAY,KAAKE,oBAAoB,GAAG;GACjD,MAAM,SAAS,SAAS,UAAU,CAAC;GACnC,IAAI,CAAC,OAAO,QAAQ;GACpB,UAAU,oBAAoB,SAAS,IAAI,KAAK;IAC9C,MAAM,SAAS;IACf,KAAK,SAAS;IACd,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd;GACF;EACF;EAEA,UAAU,qBAAqB;GAC7B,MAAM;GACN,cAAc;GACd,cAAc;GACd,SAAS,KAAK;GACd,QAAQ,CAAC,GAAG,kBAAkB;EAChC;EAEA,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB,EAAE,aAAa,KAAKD,aAAa,CAAC;GACrF,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EAEA,OAAO;CACT;CAEA,SAAS,SAAmE;EAC1E,OAAO,KAAKL,6BAA6B,KAAKH,eAAe,SAAS,OAAO,IAAI;CACnF;CAEA,MAAM,UAAU,SAAkC;EAChD,MAAM,aAAa,yBAAyB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;EACnE,IAAI,KAAKG,4BAA4B,OAAO,KAAKD,wBAAwB;EACzE,OAAO,aAAc,mBAAmB,YAAY,KAAKM,YAAY,KAAK,KAAM;CAClF;CAEA,YAAY,SAA4D;EACtE,IAAI,KAAKL,8BAA8B,KAAKD,sBAC1C,OAAO;GAAE,QAAQ,KAAKA;GAAsB,QAAQ;EAAU;EAGhE,MAAM,iBAAiB,KAAKO,oBAAoB,CAAC,CAAC,MAChD,aAAY,QAAQ,eAAe,oBAAoB,SAAS,IAAI,CACtE;EACA,IAAI,gBAAgB,QAClB,OAAO;GAAE,QAAQ,eAAe;GAAQ,QAAQ;EAAU;EAG5D,OAAO,kBAAkB,oBAAoB,SAAS,KAAA,GAAW,KAAKD,YAAY;CACpF;CAEA,qBAAqB,MAOI;EACvB,MAAM,iBAAiB,KAAKC,oBAAoB,CAAC,CAAC,MAChD,aAAY,KAAK,eAAe,oBAAoB,SAAS,IAAI,CACnE;EACA,IAAI,gBAAgB;GAClB,MAAM,WAAW,uBAAuB;IACtC,MAAM,KAAK;IACX,SAAS,eAAe;IACxB,QAAQ,KAAK;IACb,SAAS,KAAK;GAChB,CAAC;GACD,MAAM,kBAAkB,KAAKL,iBAAiB,mCAAmC,KAAKA,kBAAkB,KAAA;GACxG,MAAM,aAAa,gCAAgC,KAAK,YAAY,eAAe;GACnF,IAAI,CAAC,YACH,OAAO,SAAS,UAAU,KAAK,OAAO;GAExC,OAAO,kBAAkB;IACvB,OAAO,SAAS,UAAU,KAAK,OAAO;IACtC,YAAY,CAAC,UAAU;GACzB,CAAC;EACH;EAEA,IAAI,KAAK,eAAe,kBACtB,OAAO,sBAAsB,KAAK,SAAS;GACzC,SAAS,KAAK;GACd,aAAa,KAAKI;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,cAAc;GAIpC,MAAM,SACJ,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK;GACvG,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uBAAuB;GAEzC,OAAO,gBAAgB;IACrB;IACA,SAAS;IACT,MAAM;IACN,SAAS,KAAK;GAChB,CAAC,CAAC,CAAC,KAAK,OAAO;EACjB;EAEA,IAAI,KAAK,eAAe,aACtB,OAAO,KAAKE,uBAAuB,IAAI;EAGzC,IAAI,KAAK,eAAe,UAAU;GAChC,MAAM,cAAc,KAAKC,oBAAoB,IAAI;GACjD,IAAI,aAAa,OAAO;EAC1B;EAEA,IAAI,KAAK,eAAe,SAAS,KAAKH,aAAa,IAAI,KAAK,CAAC,EAAE,SAAS,SACtE,OAAO,YAAY,KAAK,SAAS;GAC/B,SAAS,KAAK;GACd,aAAa,KAAKA;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,UACtB,OAAO,KAAKI,oBAAoB,IAAI;EAGtC,IAAI,KAAKT,4BACP,OAAO,KAAKH,eAAe,qBAAqB,IAAI;EAGtD,IAAI,KAAK,eAAe,mBACtB,OAAO,mBAAmB,KAAK,SAAS;GACtC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,iBAAiB,KAAKQ;EACxB,CAAC;EAGH,OAAO,IAAI,yBAAyB;GAClC,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;CACH;CAEA,uBAAuB,MAOE;EACvB,MAAM,cAAc,0BAA0B,KAAK,OAAO;EAC1D,MAAM,aAAa,KAAKA,aAAa,IAAI,WAAW;EACpD,MAAM,qBAAqB,kCAAkC,aAAa,KAAKJ,cAAc;EAE7F,IAAI,KAAKD,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAWvB,OAAO,kBAAkB;IACvB,OAXgB,gBAAgB;KAChC,QAAQ;KACR,SAAS,GAAG,KAAKF,sBAAsB;KACvC,SAAS;OACN,sBAAsB,UAAU,KAAK;MACtC,GAAG,KAAK;KACV;KACA,OAAO,yBAAyB,EAAE,aAAa,KAAKO,aAAa,CAAC;IACpE,CAGiB,CAAC,CAAC,WAAW;IAC5B,YAAY;KACV;KACA,4BAA4B,KAAKH,0BAA0B;KAC3D,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;IACnD;GACF,CAAC;GAGH,MAAM,eAAe,KAAKL,eAAe,qBAAqB;IAC5D,GAAG;IACH,SAAS;GACX,CAAC;GACD,IAAI,CAAC,oBAAoB,OAAO;GAChC,OAAO,kBAAkB;IACvB,OAAO;IACP,YAAY,CAAC,kBAAkB;GACjC,CAAC;EACH;EAEA,IAAI,YAAY,SAAS,SACvB,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKQ;GAClB,eAAe,KAAKJ;GACpB,kBAAkB,KAAKC;EACzB,CAAC;EAGH,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,wBACL,aACA,WAAW,IAAI,KAAK,GACpB,KAAK,SACL,KAAKD,gBACL,KAAKC,0BACP;EAGF,MAAM,SAAS,mBAAmB,KAAKG,YAAY;EACnD,IAAI,QACF,OAAO,wBACL,aACA,QACA,KAAK,SACL,KAAKJ,gBACL,KAAKC,0BACP;EAIF,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKG;GAClB,eAAe,KAAKJ;GACpB,kBAAkB,KAAKC;EACzB,CAAC;CACH;CAEA,oBAAoB,MAOiB;EACnC,MAAM,aAAa,KAAKG,aAAa,IAAI,cAAc;EAEvD,IAAI,KAAKL,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAAS;IAEhC,MAAM,sBADkB,8BAA8B,UAAU,KAAK,SAC3B,CAAC,CAAC,UAAU,cAAc,MAAM;IAG1E,MAAM,kBAAkB,mCADD,0BAA0B,qBADX,KAAKC,kBAAkB,QAEW;IACxE,MAAM,aAAa,sBAAsB,eAAe;IAWxD,OAAO,kBAAkB;KACvB,OAXa,aAAa;MAC1B,QAAQ;MACR,SAAS,GAAG,KAAKH,sBAAsB;MACvC,SAAS;QACN,sBAAsB,UAAU,KAAK;OACtC,GAAG,KAAK;MACV;MACA,OAAO,2BAA2B;OAAE,aAAa,KAAKO;OAAc,YAAY;MAAM,CAAC;KACzF,CAGc,CAAC,CAAC,UAAU,mBAAmB;KAC3C,YAAY,CAAC,UAAU;IACzB,CAAC;GACH;GAEA,OAAO,KAAKR,eAAe,qBAAqB,IAAI;EACtD;EAEA,IAAI,YAAY,SAAS,SAEvB,OAAO,oBADiB,8BAA8B,UAAU,KAAK,SAC5B,CAAC,CAAC,UAAU,cAAc,MAAM,GAAG;GAC1E,eAAe,KAAKI;GACpB,SAAS,KAAK;GACd,aAAa,KAAKI;EACpB,CAAC;EAGH,MAAM,SAAS,gBAAgB,KAAKA,YAAY;EAChD,IAAI,QACF,OAAO,qBACL,KAAK,SACL,QACA,KAAK,SACL,KAAKJ,cACP;CAIJ;CAEA,oBAAoB,MAOK;EACvB,MAAM,YAAY,KAAKD,6BAClB,KAAKH,eAAe,qBAAqB,IAAI,IAC7C,IAAI,yBAAyB;GAC5B,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;EAEL,MAAM,qBAAqB,+BAA+B,KAAK,SAAS,KAAKI,cAAc;EAC3F,IAAI,CAAC,oBAAoB,OAAO;EAEhC,OAAO,kBAAkB;GACvB,OAAO;GACP,YAAY,CAAC,kBAAkB;EACjC,CAAC;CACH;AACF"}
+{"version":3,"file":"mastracode-gateway.js","names":["#mastraGateway","#mastraGatewayBaseUrl","#mastraGatewayApiKey","#routeThroughMastraGateway","#thinkingLevel","#anthropicPromptCacheScope","#customProviders","#settingsPath","#credentials","#getCustomProviders","#resolveAnthropicModel","#resolveOpenAIModel","#resolveGoogleModel"],"sources":["../../src/agents/mastracode-gateway.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport { createOpenAI } from '@ai-sdk/openai';\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { CustomAvailableModel, CustomModelCatalogProvider } from '@mastra/core/agent-controller';\nimport {\n  GATEWAY_AUTH_HEADER,\n  MastraGateway,\n  MastraModelGateway,\n  ModelRouterLanguageModel,\n  PROVIDER_REGISTRY,\n} from '@mastra/core/llm';\nimport type {\n  GatewayAuthRequest,\n  GatewayAuthResult,\n  GatewayLanguageModel,\n  MastraModelGatewayInterface,\n  ProviderConfig,\n} from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { getCustomProviderId, loadSettings, MASTRA_GATEWAY_PROVIDER } from '../onboarding/settings.js';\nimport type { AnthropicPromptCacheScope } from '../providers/anthropic-prompt-cache.js';\nimport {\n  buildAnthropicOAuthFetch,\n  claudeCodeMiddleware,\n  createAnthropicThinkingMiddleware,\n  createPromptCacheMiddleware,\n  opencodeClaudeMaxProvider,\n} from '../providers/claude-max.js';\nimport { getCopilotModelCatalog, githubCopilotProvider } from '../providers/github-copilot.js';\nimport { createGoogleThinkingMiddleware } from '../providers/google-thinking.js';\nimport { KIMI_CODING_MODELS, kimiCodingProvider } from '../providers/kimi-coding.js';\nimport {\n  normalizeAnthropicModelId,\n  OPENAI_PREFIX,\n  remapOpenAIModelForCodexOAuth,\n  stripMastraGatewayPrefix,\n} from '../providers/model-ids.js';\nimport {\n  buildOpenAICodexOAuthFetch,\n  createCodexMiddleware,\n  createReasoningEffortMiddleware,\n  getEffectiveThinkingLevel,\n  openaiCodexProvider,\n  THINKING_LEVEL_TO_REASONING_EFFORT,\n} from '../providers/openai-codex.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { xaiProvider } from '../providers/xai.js';\nimport { getAppDataDir } from '../utils/project.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\n\nexport {\n  MASTRA_GATEWAY_PREFIX,\n  OPENAI_PREFIX,\n  remapOpenAIModelForCodexOAuth,\n  stripMastraGatewayPrefix,\n} from '../providers/model-ids.js';\n\nexport const MASTRACODE_GATEWAY_ID = 'mastracode';\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport type MastraCodeCustomProvider = { name: string; url: string; apiKey?: string; models?: string[] };\n\nexport type MastraCodeGatewayOptions = {\n  mastraGatewayBaseUrl: string;\n  mastraGatewayApiKey?: string;\n  routeThroughMastraGateway: boolean;\n  thinkingLevel?: ThinkingLevel;\n  /** Anthropic prompt-cache breakpoints to write. Defaults to `conversation`. */\n  anthropicPromptCacheScope?: AnthropicPromptCacheScope;\n  customProviders?: MastraCodeCustomProvider[];\n  settingsPath?: string;\n  /**\n   * Per-tenant credential source for this gateway instance. Defaults to the\n   * server-global file-backed `AuthStorage`; deployed web passes the calling\n   * tenant's store so model calls use the caller's own credentials.\n   */\n  credentialStore?: CredentialStore;\n};\n\n/**\n * Global file-backed credential store for local (TUI) model resolution.\n *\n * Constructed lazily, NOT at module scope: `AuthStorage`'s default path is\n * resolved from `MASTRA_APP_DATA_DIR` at construction, and this module is\n * routinely imported before test harnesses / embedders point that variable at\n * an isolated directory — an import-time construction would permanently pin\n * the developer's real app-data dir for every credential read.\n */\nlet authStorageSingleton: AuthStorage | undefined;\nlet authStorageSingletonDir: string | undefined;\n\nexport function getGlobalAuthStorage(): AuthStorage {\n  // Keyed by the resolved app-data dir: in-process harnesses re-point\n  // MASTRA_APP_DATA_DIR per run inside one long-lived worker, so a store\n  // pinned to a previous dir must be discarded, not reused.\n  const dir = getAppDataDir();\n  if (!authStorageSingleton || authStorageSingletonDir !== dir) {\n    authStorageSingleton = new AuthStorage();\n    authStorageSingletonDir = dir;\n  }\n  return authStorageSingleton;\n}\n\nexport function reloadAuthStorage() {\n  getGlobalAuthStorage().reload();\n}\n\n/**\n * Resolve the Anthropic API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getAnthropicApiKey(credentials: CredentialStore = getGlobalAuthStorage()): string | undefined {\n  const storedCred = credentials.get('anthropic');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('anthropic')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false\n    ? undefined\n    : process.env.ANTHROPIC_API_KEY?.trim() || undefined;\n}\n\n/**\n * Resolve the OpenAI API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getOpenAIApiKey(credentials: CredentialStore = getGlobalAuthStorage()): string | undefined {\n  const storedCred = credentials.get('openai-codex');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('openai-codex')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false ? undefined : process.env.OPENAI_API_KEY?.trim() || undefined;\n}\n\nfunction anthropicApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers: ModelRequestHeaders | undefined,\n  thinkingLevel: ThinkingLevel | undefined,\n  promptCacheScope: AnthropicPromptCacheScope,\n) {\n  const anthropic = createAnthropic({ apiKey, headers });\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, thinkingLevel);\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [createPromptCacheMiddleware(promptCacheScope), ...(thinkingMiddleware ? [thinkingMiddleware] : [])],\n  });\n}\n\nfunction openaiApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers?: ModelRequestHeaders,\n  thinkingLevel?: ThinkingLevel,\n) {\n  const openai = createOpenAI({ apiKey, baseURL: process.env.OPENAI_BASE_URL, headers });\n  const middleware =\n    thinkingLevel && thinkingLevel !== 'off'\n      ? createReasoningEffortMiddleware(\n          'openai',\n          THINKING_LEVEL_TO_REASONING_EFFORT[getEffectiveThinkingLevel(modelId, thinkingLevel)],\n        )\n      : undefined;\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: middleware ? [middleware] : [],\n  });\n}\n\nfunction getAuthProviderId(providerId: string): string {\n  return providerId === 'openai' ? 'openai-codex' : providerId;\n}\n\nfunction getProviderAuthKey(\n  providerId: string,\n  credentials: CredentialStore = getGlobalAuthStorage(),\n): string | undefined {\n  const authProviderId = getAuthProviderId(providerId);\n  const storedCred = credentials.get(authProviderId);\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey(authProviderId)?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  if (credentials.allowEnvironmentFallback === false) return undefined;\n  return authProviderId === 'kimi-for-coding' ? process.env.KIMI_API_KEY?.trim() || undefined : undefined;\n}\n\nexport function resolveAuth(request: GatewayAuthRequest, mastraGatewayApiKey?: string): GatewayAuthResult | undefined {\n  return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);\n}\n\nfunction getGatewayProviderKey(gatewayId: string, providerId: string): string {\n  if (gatewayId === 'models.dev') return providerId;\n  return providerId === gatewayId ? gatewayId : `${gatewayId}/${providerId}`;\n}\n\nfunction parseGatewayRouterId(\n  routerId: string,\n  gateway: MastraModelGatewayInterface,\n): { gatewayId: string; providerId: string; modelId: string } {\n  const [firstPart = '', secondPart = '', ...restParts] = routerId.split('/');\n  const gatewayId = gateway.id;\n\n  if (firstPart === gatewayId && secondPart) {\n    return {\n      gatewayId,\n      providerId: secondPart,\n      modelId: restParts.join('/'),\n    };\n  }\n\n  return {\n    gatewayId,\n    providerId: firstPart,\n    modelId: [secondPart, ...restParts].filter(Boolean).join('/'),\n  };\n}\n\nfunction hasResolvedAuth(auth: GatewayAuthResult | undefined): boolean {\n  if (!auth) return false;\n  if (auth.apiKey || auth.bearerToken) return true;\n  return auth.headers ? Object.keys(auth.headers).length > 0 : false;\n}\n\nasync function resolveGatewayProviderAuth(\n  gateway: MastraModelGatewayInterface,\n  routerId: string,\n): Promise<GatewayAuthResult | undefined> {\n  if (!gateway.resolveAuth) return undefined;\n\n  const parsed = parseGatewayRouterId(routerId, gateway);\n  try {\n    const result = await gateway.resolveAuth({\n      gatewayId: parsed.gatewayId,\n      providerId: parsed.providerId,\n      modelId: parsed.modelId,\n      routerId,\n    });\n    return hasResolvedAuth(result) ? result : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getMastraCodeProviderConfigs(\n  gateway: MastraModelGatewayInterface,\n): Promise<Record<string, ProviderConfig>> {\n  const providers: Record<string, ProviderConfig> = { ...(PROVIDER_REGISTRY as Record<string, ProviderConfig>) };\n\n  try {\n    const gatewayProviders = await gateway.fetchProviders();\n    for (const [providerId, config] of Object.entries(gatewayProviders)) {\n      providers[getGatewayProviderKey(gateway.id, providerId)] = {\n        ...config,\n        gateway: gateway.id,\n      };\n    }\n  } catch (error) {\n    console.warn(`Failed to load providers from gateway ${gateway.id}:`, error);\n  }\n\n  return providers;\n}\n\nfunction getApiKeyEnvVar(providerConfig: Pick<ProviderConfig, 'apiKeyEnvVar'> | undefined): string | undefined {\n  const envVars = providerConfig?.apiKeyEnvVar;\n  return Array.isArray(envVars) ? envVars[0] : envVars;\n}\n\nexport class MastraCodeGateway extends MastraModelGateway {\n  readonly id = MASTRACODE_GATEWAY_ID;\n  readonly name = 'MastraCode Gateway';\n\n  readonly #mastraGateway: MastraGateway;\n  readonly #mastraGatewayBaseUrl: string;\n  readonly #mastraGatewayApiKey?: string;\n  readonly #routeThroughMastraGateway: boolean;\n  readonly #thinkingLevel?: ThinkingLevel;\n  readonly #anthropicPromptCacheScope: AnthropicPromptCacheScope;\n  readonly #customProviders?: MastraCodeCustomProvider[];\n  readonly #settingsPath?: string;\n  readonly #credentials: CredentialStore;\n\n  constructor({\n    mastraGatewayBaseUrl,\n    mastraGatewayApiKey,\n    routeThroughMastraGateway,\n    thinkingLevel,\n    anthropicPromptCacheScope,\n    customProviders,\n    settingsPath,\n    credentialStore,\n  }: MastraCodeGatewayOptions) {\n    super();\n    this.#mastraGateway = new MastraGateway({ baseUrl: mastraGatewayBaseUrl });\n    this.#mastraGatewayBaseUrl = mastraGatewayBaseUrl;\n    this.#mastraGatewayApiKey = mastraGatewayApiKey;\n    this.#routeThroughMastraGateway = routeThroughMastraGateway;\n    this.#thinkingLevel = thinkingLevel;\n    this.#anthropicPromptCacheScope = anthropicPromptCacheScope ?? 'conversation';\n    this.#customProviders = customProviders;\n    this.#settingsPath = settingsPath;\n    this.#credentials = credentialStore ?? getGlobalAuthStorage();\n  }\n\n  static getMastraGatewayApiKey(): string | undefined {\n    return getGlobalAuthStorage().getStoredApiKey(MASTRA_GATEWAY_PROVIDER) ?? process.env['MASTRA_GATEWAY_API_KEY'];\n  }\n\n  /** @deprecated Renamed to {@link MastraCodeGateway.getMastraGatewayApiKey}. */\n  static getMemoryGatewayApiKey(): string | undefined {\n    return MastraCodeGateway.getMastraGatewayApiKey();\n  }\n\n  /**\n   * Claim an unprefixed model id (e.g. a bare `anthropic/...`) when this gateway\n   * can authenticate it via OAuth or a stored/env credential. This lets the\n   * shared gateway router select MastraCode for auth resolution, so the status\n   * bar and `/api-keys` reflect OAuth logins instead of only checking env vars.\n   */\n  handlesModel(modelId: string): boolean {\n    const parsed = parseGatewayRouterId(modelId, this);\n    if (!parsed.providerId || !parsed.modelId) return false;\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) return true;\n    const customProvider = this.#getCustomProviders().find(\n      provider => parsed.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) return true;\n    return hasResolvedAuth(\n      MastraCodeGateway.resolveProviderAuth(\n        {\n          gatewayId: this.id,\n          providerId: parsed.providerId,\n          modelId: parsed.modelId,\n          routerId: modelId,\n        },\n        undefined,\n        this.#credentials,\n      ),\n    );\n  }\n\n  static resolveProviderAuth(\n    request: GatewayAuthRequest,\n    mastraGatewayApiKey?: string,\n    credentials: CredentialStore = getGlobalAuthStorage(),\n  ): GatewayAuthResult | undefined {\n    if (request.gatewayId === 'mastra' && mastraGatewayApiKey) {\n      return { apiKey: mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const authProviderId = getAuthProviderId(request.providerId);\n    const storedCred = credentials.get(authProviderId);\n    if (storedCred?.type === 'oauth') {\n      return { bearerToken: 'oauth', source: 'gateway' };\n    }\n\n    const apiKey = getProviderAuthKey(request.providerId, credentials);\n    return apiKey ? { apiKey, source: 'gateway' } : undefined;\n  }\n\n  static createModelCatalogProvider(gateway: MastraModelGatewayInterface): CustomModelCatalogProvider {\n    return async () => {\n      const registry = await getMastraCodeProviderConfigs(gateway);\n      const models: CustomAvailableModel[] = [];\n\n      for (const [provider, providerConfig] of Object.entries(registry)) {\n        const apiKeyEnvVar = getApiKeyEnvVar(providerConfig);\n        const hasEnvKey = apiKeyEnvVar ? Boolean(process.env[apiKeyEnvVar]) : false;\n        const modelNames = providerConfig.models;\n        if (!Array.isArray(modelNames)) continue;\n\n        const gatewayAuth = modelNames[0]\n          ? await resolveGatewayProviderAuth(gateway, `${provider}/${modelNames[0]}`)\n          : undefined;\n\n        for (const modelName of modelNames) {\n          const id = `${provider}/${modelName}`;\n          models.push({\n            id,\n            provider,\n            modelName,\n            hasApiKey: hasEnvKey || Boolean(gatewayAuth),\n            apiKeyEnvVar: apiKeyEnvVar || undefined,\n          });\n        }\n      }\n\n      return models;\n    };\n  }\n\n  createModelCatalogProvider(): CustomModelCatalogProvider {\n    return MastraCodeGateway.createModelCatalogProvider(this);\n  }\n\n  #getCustomProviders(): MastraCodeCustomProvider[] {\n    // Explicit constructor list wins; then a registered source (deployed web,\n    // DB-backed — authoritative, so settings.json is never consulted); then\n    // the local file-backed settings.\n    return this.#customProviders ?? resolveCustomProviders() ?? loadSettings(this.#settingsPath).customProviders;\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    for (const provider of this.#getCustomProviders()) {\n      const models = provider.models ?? [];\n      if (!models.length) continue;\n      providers[getCustomProviderId(provider.name)] = {\n        name: provider.name,\n        url: provider.url,\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models,\n      };\n    }\n\n    providers['kimi-for-coding'] = {\n      name: 'Kimi For Coding',\n      apiKeyEnvVar: 'KIMI_API_KEY',\n      apiKeyHeader: 'Authorization',\n      gateway: this.id,\n      models: [...KIMI_CODING_MODELS],\n    };\n\n    try {\n      const copilotModels = await getCopilotModelCatalog({ authStorage: this.#credentials });\n      providers['github-copilot'] = {\n        name: 'GitHub Copilot',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: copilotModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load GitHub Copilot model catalog:', error);\n    }\n\n    return providers;\n  }\n\n  buildUrl(modelId: string): string | undefined | Promise<string | undefined> {\n    return this.#routeThroughMastraGateway ? this.#mastraGateway.buildUrl(modelId) : modelId;\n  }\n\n  async getApiKey(modelId: string): Promise<string> {\n    const providerId = stripMastraGatewayPrefix(modelId).split('/', 1)[0];\n    if (this.#routeThroughMastraGateway) return this.#mastraGatewayApiKey ?? '';\n    return providerId ? (getProviderAuthKey(providerId, this.#credentials) ?? '') : '';\n  }\n\n  resolveAuth(request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) {\n      return { apiKey: this.#mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const customProvider = this.#getCustomProviders().find(\n      provider => request.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) {\n      return { apiKey: customProvider.apiKey, source: 'gateway' };\n    }\n\n    return MastraCodeGateway.resolveProviderAuth(request, undefined, this.#credentials);\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const customProvider = this.#getCustomProviders().find(\n      provider => args.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider) {\n      const provider = createOpenAICompatible({\n        name: args.providerId,\n        baseURL: customProvider.url,\n        apiKey: args.apiKey,\n        headers: args.headers,\n      });\n      const reasoningEffort = this.#thinkingLevel ? THINKING_LEVEL_TO_REASONING_EFFORT[this.#thinkingLevel] : undefined;\n      const middleware = createReasoningEffortMiddleware(args.providerId, reasoningEffort);\n      if (!middleware) {\n        return provider.chatModel(args.modelId) as unknown as GatewayLanguageModel;\n      }\n      return wrapLanguageModel({\n        model: provider.chatModel(args.modelId),\n        middleware: [middleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'github-copilot') {\n      return githubCopilotProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'moonshotai') {\n      // Prefer the gateway-resolved key (stored credentials), then the canonical\n      // registry env var. Keep the legacy typo name as a fallback for anyone who\n      // set it because of the previous error message.\n      const apiKey =\n        args.apiKey?.trim() || process.env.MOONSHOT_API_KEY?.trim() || process.env.MOONSHOT_AI_API_KEY?.trim();\n      if (!apiKey) {\n        throw new Error('Need MOONSHOT_API_KEY');\n      }\n      return createAnthropic({\n        apiKey,\n        baseURL: 'https://api.moonshot.ai/anthropic/v1',\n        name: 'moonshotai.anthropicv1',\n        headers: args.headers,\n      })(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'anthropic') {\n      return this.#resolveAnthropicModel(args);\n    }\n\n    if (args.providerId === 'openai') {\n      const openaiModel = this.#resolveOpenAIModel(args);\n      if (openaiModel) return openaiModel;\n    }\n\n    if (args.providerId === 'xai' && this.#credentials.get('xai')?.type === 'oauth') {\n      return xaiProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'google') {\n      return this.#resolveGoogleModel(args);\n    }\n\n    if (this.#routeThroughMastraGateway) {\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'kimi-for-coding') {\n      return kimiCodingProvider(args.modelId, {\n        apiKey: args.apiKey,\n        headers: args.headers,\n        credentialStore: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    return new ModelRouterLanguageModel({\n      id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n      apiKey: args.apiKey,\n      headers: args.headers,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveAnthropicModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const bareModelId = normalizeAnthropicModelId(args.modelId);\n    const storedCred = this.#credentials.get('anthropic');\n    const thinkingMiddleware = createAnthropicThinkingMiddleware(bareModelId, this.#thinkingLevel);\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const anthropic = createAnthropic({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildAnthropicOAuthFetch({ authStorage: this.#credentials }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: anthropic(bareModelId),\n          middleware: [\n            claudeCodeMiddleware,\n            createPromptCacheMiddleware(this.#anthropicPromptCacheScope),\n            ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n          ],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      const gatewayModel = this.#mastraGateway.resolveLanguageModel({\n        ...args,\n        modelId: bareModelId,\n      }) as GatewayLanguageModel;\n      if (!thinkingMiddleware) return gatewayModel;\n      return wrapLanguageModel({\n        model: gatewayModel as any,\n        middleware: [thinkingMiddleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      return opencodeClaudeMaxProvider(bareModelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n        thinkingLevel: this.#thinkingLevel,\n        promptCacheScope: this.#anthropicPromptCacheScope,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        storedCred.key.trim(),\n        args.headers,\n        this.#thinkingLevel,\n        this.#anthropicPromptCacheScope,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getAnthropicApiKey(this.#credentials);\n    if (apiKey) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n        this.#anthropicPromptCacheScope,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    // No stored credentials: use the OAuth-backed provider so the first request can trigger login.\n    return opencodeClaudeMaxProvider(bareModelId, {\n      headers: args.headers,\n      authStorage: this.#credentials,\n      thinkingLevel: this.#thinkingLevel,\n      promptCacheScope: this.#anthropicPromptCacheScope,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveOpenAIModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel | undefined {\n    const storedCred = this.#credentials.get('openai-codex');\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n        const resolvedBareModelId = resolvedModelId.substring(OPENAI_PREFIX.length);\n        const effectiveLevel = getEffectiveThinkingLevel(args.modelId, this.#thinkingLevel ?? 'medium');\n        const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n        const middleware = createCodexMiddleware(reasoningEffort);\n        const openai = createOpenAI({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildOpenAICodexOAuthFetch({ authStorage: this.#credentials, rewriteUrl: false }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: openai.responses(resolvedBareModelId),\n          middleware: [middleware],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n      return openaiCodexProvider(resolvedModelId.substring(OPENAI_PREFIX.length), {\n        thinkingLevel: this.#thinkingLevel && getEffectiveThinkingLevel(args.modelId, this.#thinkingLevel),\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getOpenAIApiKey(this.#credentials);\n    if (apiKey) {\n      return openaiApiKeyProvider(\n        args.modelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    return undefined;\n  }\n\n  #resolveGoogleModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const baseModel = this.#routeThroughMastraGateway\n      ? (this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel)\n      : (new ModelRouterLanguageModel({\n          id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n          apiKey: args.apiKey,\n          headers: args.headers,\n        }) as unknown as GatewayLanguageModel);\n\n    const thinkingMiddleware = createGoogleThinkingMiddleware(args.modelId, this.#thinkingLevel);\n    if (!thinkingMiddleware) return baseModel;\n\n    return wrapLanguageModel({\n      model: baseModel as any,\n      middleware: [thinkingMiddleware],\n    }) as unknown as GatewayLanguageModel;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2DA,MAAa,wBAAwB;;;;;;;;;;AAgCrC,IAAI;AACJ,IAAI;AAEJ,SAAgB,uBAAoC;CAIlD,MAAM,MAAM,cAAc;CAC1B,IAAI,CAAC,wBAAwB,4BAA4B,KAAK;EAC5D,uBAAuB,IAAI,YAAY;EACvC,0BAA0B;CAC5B;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB;CAClC,qBAAqB,CAAC,CAAC,OAAO;AAChC;;;;;AAMA,SAAgB,mBAAmB,cAA+B,qBAAqB,GAAuB;CAC5G,MAAM,aAAa,YAAY,IAAI,WAAW;CAC9C,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,WAAW,CAAC,EAAE,KAAK;CACpE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAC5C,KAAA,IACA,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAA;AAC/C;;;;;AAMA,SAAgB,gBAAgB,cAA+B,qBAAqB,GAAuB;CACzG,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAAQ,KAAA,IAAY,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC5G;AAEA,SAAS,wBACP,SACA,QACA,SACA,eACA,kBACA;CACA,MAAM,YAAY,gBAAgB;EAAE;EAAQ;CAAQ,CAAC;CACrD,MAAM,qBAAqB,kCAAkC,SAAS,aAAa;CACnF,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB,YAAY,CAAC,4BAA4B,gBAAgB,GAAG,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC,CAAE;CACjH,CAAC;AACH;AAEA,SAAS,qBACP,SACA,QACA,SACA,eACA;CACA,MAAM,SAAS,aAAa;EAAE;EAAQ,SAAS,QAAQ,IAAI;EAAiB;CAAQ,CAAC;CACrF,MAAM,aACJ,iBAAiB,kBAAkB,QAC/B,gCACE,UACA,mCAAmC,0BAA0B,SAAS,aAAa,EACrF,IACA,KAAA;CACN,OAAO,kBAAkB;EACvB,OAAO,OAAO,UAAU,OAAO;EAC/B,YAAY,aAAa,CAAC,UAAU,IAAI,CAAC;CAC3C,CAAC;AACH;AAEA,SAAS,kBAAkB,YAA4B;CACrD,OAAO,eAAe,WAAW,iBAAiB;AACpD;AAEA,SAAS,mBACP,YACA,cAA+B,qBAAqB,GAChC;CACpB,MAAM,iBAAiB,kBAAkB,UAAU;CACnD,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,IAAI,YAAY,6BAA6B,OAAO,OAAO,KAAA;CAC3D,OAAO,mBAAmB,oBAAoB,QAAQ,IAAI,cAAc,KAAK,KAAK,KAAA,IAAY,KAAA;AAChG;AAEA,SAAgB,YAAY,SAA6B,qBAA6D;CACpH,OAAO,kBAAkB,oBAAoB,SAAS,mBAAmB;AAC3E;AAEA,SAAS,sBAAsB,WAAmB,YAA4B;CAC5E,IAAI,cAAc,cAAc,OAAO;CACvC,OAAO,eAAe,YAAY,YAAY,GAAG,UAAU,GAAG;AAChE;AAEA,SAAS,qBACP,UACA,SAC4D;CAC5D,MAAM,CAAC,YAAY,IAAI,aAAa,IAAI,GAAG,aAAa,SAAS,MAAM,GAAG;CAC1E,MAAM,YAAY,QAAQ;CAE1B,IAAI,cAAc,aAAa,YAC7B,OAAO;EACL;EACA,YAAY;EACZ,SAAS,UAAU,KAAK,GAAG;CAC7B;CAGF,OAAO;EACL;EACA,YAAY;EACZ,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG;CAC9D;AACF;AAEA,SAAS,gBAAgB,MAA8C;CACrE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,UAAU,KAAK,aAAa,OAAO;CAC5C,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI;AAC/D;AAEA,eAAe,2BACb,SACA,UACwC;CACxC,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAA;CAEjC,MAAM,SAAS,qBAAqB,UAAU,OAAO;CACrD,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,YAAY;GACvC,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB;EACF,CAAC;EACD,OAAO,gBAAgB,MAAM,IAAI,SAAS,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;AAEA,eAAe,6BACb,SACyC;CACzC,MAAM,YAA4C,EAAE,GAAI,kBAAqD;CAE7G,IAAI;EACF,MAAM,mBAAmB,MAAM,QAAQ,eAAe;EACtD,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QAAQ,gBAAgB,GAChE,UAAU,sBAAsB,QAAQ,IAAI,UAAU,KAAK;GACzD,GAAG;GACH,SAAS,QAAQ;EACnB;CAEJ,SAAS,OAAO;EACd,QAAQ,KAAK,yCAAyC,QAAQ,GAAG,IAAI,KAAK;CAC5E;CAEA,OAAO;AACT;AAEA,SAAS,gBAAgB,gBAAsF;CAC7G,MAAM,UAAU,gBAAgB;CAChC,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAC/C;AAEA,IAAa,oBAAb,MAAa,0BAA0B,mBAAmB;CACxD,KAAc;CACd,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,sBACA,qBACA,2BACA,eACA,2BACA,iBACA,cACA,mBAC2B;EAC3B,MAAM;EACN,KAAKA,iBAAiB,IAAI,cAAc,EAAE,SAAS,qBAAqB,CAAC;EACzE,KAAKC,wBAAwB;EAC7B,KAAKC,uBAAuB;EAC5B,KAAKC,6BAA6B;EAClC,KAAKC,iBAAiB;EACtB,KAAKC,6BAA6B,6BAA6B;EAC/D,KAAKC,mBAAmB;EACxB,KAAKC,gBAAgB;EACrB,KAAKC,eAAe,mBAAmB,qBAAqB;CAC9D;CAEA,OAAO,yBAA6C;EAClD,OAAO,qBAAqB,CAAC,CAAC,gBAAA,gBAAuC,KAAK,QAAQ,IAAI;CACxF;;CAGA,OAAO,yBAA6C;EAClD,OAAO,kBAAkB,uBAAuB;CAClD;;;;;;;CAQA,aAAa,SAA0B;EACrC,MAAM,SAAS,qBAAqB,SAAS,IAAI;EACjD,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,SAAS,OAAO;EAClD,IAAI,KAAKL,8BAA8B,KAAKD,sBAAsB,OAAO;EAIzE,IAHuB,KAAKO,oBAAoB,CAAC,CAAC,MAChD,aAAY,OAAO,eAAe,oBAAoB,SAAS,IAAI,CAEpD,CAAC,EAAE,QAAQ,OAAO;EACnC,OAAO,gBACL,kBAAkB,oBAChB;GACE,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB,UAAU;EACZ,GACA,KAAA,GACA,KAAKD,YACP,CACF;CACF;CAEA,OAAO,oBACL,SACA,qBACA,cAA+B,qBAAqB,GACrB;EAC/B,IAAI,QAAQ,cAAc,YAAY,qBACpC,OAAO;GAAE,QAAQ;GAAqB,QAAQ;EAAU;EAG1D,MAAM,iBAAiB,kBAAkB,QAAQ,UAAU;EAE3D,IADmB,YAAY,IAAI,cACtB,CAAC,EAAE,SAAS,SACvB,OAAO;GAAE,aAAa;GAAS,QAAQ;EAAU;EAGnD,MAAM,SAAS,mBAAmB,QAAQ,YAAY,WAAW;EACjE,OAAO,SAAS;GAAE;GAAQ,QAAQ;EAAU,IAAI,KAAA;CAClD;CAEA,OAAO,2BAA2B,SAAkE;EAClG,OAAO,YAAY;GACjB,MAAM,WAAW,MAAM,6BAA6B,OAAO;GAC3D,MAAM,SAAiC,CAAC;GAExC,KAAK,MAAM,CAAC,UAAU,mBAAmB,OAAO,QAAQ,QAAQ,GAAG;IACjE,MAAM,eAAe,gBAAgB,cAAc;IACnD,MAAM,YAAY,eAAe,QAAQ,QAAQ,IAAI,aAAa,IAAI;IACtE,MAAM,aAAa,eAAe;IAClC,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;IAEhC,MAAM,cAAc,WAAW,KAC3B,MAAM,2BAA2B,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI,IACxE,KAAA;IAEJ,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,KAAK,GAAG,SAAS,GAAG;KAC1B,OAAO,KAAK;MACV;MACA;MACA;MACA,WAAW,aAAa,QAAQ,WAAW;MAC3C,cAAc,gBAAgB,KAAA;KAChC,CAAC;IACH;GACF;GAEA,OAAO;EACT;CACF;CAEA,6BAAyD;EACvD,OAAO,kBAAkB,2BAA2B,IAAI;CAC1D;CAEA,sBAAkD;EAIhD,OAAO,KAAKF,oBAAoB,uBAAuB,KAAK,aAAa,KAAKC,aAAa,CAAC,CAAC;CAC/F;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,KAAK,MAAM,YAAY,KAAKE,oBAAoB,GAAG;GACjD,MAAM,SAAS,SAAS,UAAU,CAAC;GACnC,IAAI,CAAC,OAAO,QAAQ;GACpB,UAAU,oBAAoB,SAAS,IAAI,KAAK;IAC9C,MAAM,SAAS;IACf,KAAK,SAAS;IACd,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd;GACF;EACF;EAEA,UAAU,qBAAqB;GAC7B,MAAM;GACN,cAAc;GACd,cAAc;GACd,SAAS,KAAK;GACd,QAAQ,CAAC,GAAG,kBAAkB;EAChC;EAEA,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB,EAAE,aAAa,KAAKD,aAAa,CAAC;GACrF,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EAEA,OAAO;CACT;CAEA,SAAS,SAAmE;EAC1E,OAAO,KAAKL,6BAA6B,KAAKH,eAAe,SAAS,OAAO,IAAI;CACnF;CAEA,MAAM,UAAU,SAAkC;EAChD,MAAM,aAAa,yBAAyB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;EACnE,IAAI,KAAKG,4BAA4B,OAAO,KAAKD,wBAAwB;EACzE,OAAO,aAAc,mBAAmB,YAAY,KAAKM,YAAY,KAAK,KAAM;CAClF;CAEA,YAAY,SAA4D;EACtE,IAAI,KAAKL,8BAA8B,KAAKD,sBAC1C,OAAO;GAAE,QAAQ,KAAKA;GAAsB,QAAQ;EAAU;EAGhE,MAAM,iBAAiB,KAAKO,oBAAoB,CAAC,CAAC,MAChD,aAAY,QAAQ,eAAe,oBAAoB,SAAS,IAAI,CACtE;EACA,IAAI,gBAAgB,QAClB,OAAO;GAAE,QAAQ,eAAe;GAAQ,QAAQ;EAAU;EAG5D,OAAO,kBAAkB,oBAAoB,SAAS,KAAA,GAAW,KAAKD,YAAY;CACpF;CAEA,qBAAqB,MAOI;EACvB,MAAM,iBAAiB,KAAKC,oBAAoB,CAAC,CAAC,MAChD,aAAY,KAAK,eAAe,oBAAoB,SAAS,IAAI,CACnE;EACA,IAAI,gBAAgB;GAClB,MAAM,WAAW,uBAAuB;IACtC,MAAM,KAAK;IACX,SAAS,eAAe;IACxB,QAAQ,KAAK;IACb,SAAS,KAAK;GAChB,CAAC;GACD,MAAM,kBAAkB,KAAKL,iBAAiB,mCAAmC,KAAKA,kBAAkB,KAAA;GACxG,MAAM,aAAa,gCAAgC,KAAK,YAAY,eAAe;GACnF,IAAI,CAAC,YACH,OAAO,SAAS,UAAU,KAAK,OAAO;GAExC,OAAO,kBAAkB;IACvB,OAAO,SAAS,UAAU,KAAK,OAAO;IACtC,YAAY,CAAC,UAAU;GACzB,CAAC;EACH;EAEA,IAAI,KAAK,eAAe,kBACtB,OAAO,sBAAsB,KAAK,SAAS;GACzC,SAAS,KAAK;GACd,aAAa,KAAKI;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,cAAc;GAIpC,MAAM,SACJ,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK;GACvG,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uBAAuB;GAEzC,OAAO,gBAAgB;IACrB;IACA,SAAS;IACT,MAAM;IACN,SAAS,KAAK;GAChB,CAAC,CAAC,CAAC,KAAK,OAAO;EACjB;EAEA,IAAI,KAAK,eAAe,aACtB,OAAO,KAAKE,uBAAuB,IAAI;EAGzC,IAAI,KAAK,eAAe,UAAU;GAChC,MAAM,cAAc,KAAKC,oBAAoB,IAAI;GACjD,IAAI,aAAa,OAAO;EAC1B;EAEA,IAAI,KAAK,eAAe,SAAS,KAAKH,aAAa,IAAI,KAAK,CAAC,EAAE,SAAS,SACtE,OAAO,YAAY,KAAK,SAAS;GAC/B,SAAS,KAAK;GACd,aAAa,KAAKA;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,UACtB,OAAO,KAAKI,oBAAoB,IAAI;EAGtC,IAAI,KAAKT,4BACP,OAAO,KAAKH,eAAe,qBAAqB,IAAI;EAGtD,IAAI,KAAK,eAAe,mBACtB,OAAO,mBAAmB,KAAK,SAAS;GACtC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,iBAAiB,KAAKQ;EACxB,CAAC;EAGH,OAAO,IAAI,yBAAyB;GAClC,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;CACH;CAEA,uBAAuB,MAOE;EACvB,MAAM,cAAc,0BAA0B,KAAK,OAAO;EAC1D,MAAM,aAAa,KAAKA,aAAa,IAAI,WAAW;EACpD,MAAM,qBAAqB,kCAAkC,aAAa,KAAKJ,cAAc;EAE7F,IAAI,KAAKD,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAWvB,OAAO,kBAAkB;IACvB,OAXgB,gBAAgB;KAChC,QAAQ;KACR,SAAS,GAAG,KAAKF,sBAAsB;KACvC,SAAS;OACN,sBAAsB,UAAU,KAAK;MACtC,GAAG,KAAK;KACV;KACA,OAAO,yBAAyB,EAAE,aAAa,KAAKO,aAAa,CAAC;IACpE,CAGiB,CAAC,CAAC,WAAW;IAC5B,YAAY;KACV;KACA,4BAA4B,KAAKH,0BAA0B;KAC3D,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;IACnD;GACF,CAAC;GAGH,MAAM,eAAe,KAAKL,eAAe,qBAAqB;IAC5D,GAAG;IACH,SAAS;GACX,CAAC;GACD,IAAI,CAAC,oBAAoB,OAAO;GAChC,OAAO,kBAAkB;IACvB,OAAO;IACP,YAAY,CAAC,kBAAkB;GACjC,CAAC;EACH;EAEA,IAAI,YAAY,SAAS,SACvB,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKQ;GAClB,eAAe,KAAKJ;GACpB,kBAAkB,KAAKC;EACzB,CAAC;EAGH,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,wBACL,aACA,WAAW,IAAI,KAAK,GACpB,KAAK,SACL,KAAKD,gBACL,KAAKC,0BACP;EAGF,MAAM,SAAS,mBAAmB,KAAKG,YAAY;EACnD,IAAI,QACF,OAAO,wBACL,aACA,QACA,KAAK,SACL,KAAKJ,gBACL,KAAKC,0BACP;EAIF,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKG;GAClB,eAAe,KAAKJ;GACpB,kBAAkB,KAAKC;EACzB,CAAC;CACH;CAEA,oBAAoB,MAOiB;EACnC,MAAM,aAAa,KAAKG,aAAa,IAAI,cAAc;EAEvD,IAAI,KAAKL,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAAS;IAEhC,MAAM,sBADkB,8BAA8B,UAAU,KAAK,SAC3B,CAAC,CAAC,UAAU,cAAc,MAAM;IAE1E,MAAM,kBAAkB,mCADD,0BAA0B,KAAK,SAAS,KAAKC,kBAAkB,QACd;IACxE,MAAM,aAAa,sBAAsB,eAAe;IAWxD,OAAO,kBAAkB;KACvB,OAXa,aAAa;MAC1B,QAAQ;MACR,SAAS,GAAG,KAAKH,sBAAsB;MACvC,SAAS;QACN,sBAAsB,UAAU,KAAK;OACtC,GAAG,KAAK;MACV;MACA,OAAO,2BAA2B;OAAE,aAAa,KAAKO;OAAc,YAAY;MAAM,CAAC;KACzF,CAGc,CAAC,CAAC,UAAU,mBAAmB;KAC3C,YAAY,CAAC,UAAU;IACzB,CAAC;GACH;GAEA,OAAO,KAAKR,eAAe,qBAAqB,IAAI;EACtD;EAEA,IAAI,YAAY,SAAS,SAEvB,OAAO,oBADiB,8BAA8B,UAAU,KAAK,SAC5B,CAAC,CAAC,UAAU,cAAc,MAAM,GAAG;GAC1E,eAAe,KAAKI,kBAAkB,0BAA0B,KAAK,SAAS,KAAKA,cAAc;GACjG,SAAS,KAAK;GACd,aAAa,KAAKI;EACpB,CAAC;EAGH,MAAM,SAAS,gBAAgB,KAAKA,YAAY;EAChD,IAAI,QACF,OAAO,qBACL,KAAK,SACL,QACA,KAAK,SACL,KAAKJ,cACP;CAIJ;CAEA,oBAAoB,MAOK;EACvB,MAAM,YAAY,KAAKD,6BAClB,KAAKH,eAAe,qBAAqB,IAAI,IAC7C,IAAI,yBAAyB;GAC5B,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;EAEL,MAAM,qBAAqB,+BAA+B,KAAK,SAAS,KAAKI,cAAc;EAC3F,IAAI,CAAC,oBAAoB,OAAO;EAEhC,OAAO,kBAAkB;GACvB,OAAO;GACP,YAAY,CAAC,kBAAkB;EACjC,CAAC;CACH;AACF"}

package/dist/agents/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/agents/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,kBAAkB,CAAC;AAQ5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAGL,iBAAiB,EAIlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEzE,KAAK,aAAa,GAAG,oBAAoB,CAAC;AAkB1C,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,eAAe,EACrB,cAAc,CAAC,EAAE,cAAc,GAC9B,eAAe,CAqDjB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAE5F;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,2BAA2B,6DAIxF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACR,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;CACvD,GACA,oBAAoB,CAuFtB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACpC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B;AACD;;;;;;;;;;;;GAYG;AAEH,wBAAgB,2BAA2B,CACzC,sBAAsB,EAAE,sBAAsB,GAAG,SAAS,EAC1D,YAAY,CAAC,EAAE,MAAM,GACpB,oBAAoB,CAKtB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,EACtD,YAAY,CAAC,EAAE,MAAM,GACpB,aAAa,GAAG,gBAAgB,EAAE,CAuEpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,EACtD,YAAY,CAAC,EAAE,MAAM,GACpB,aAAa,GAAG,SAAS,CAI3B"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/agents/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,kBAAkB,CAAC;AAQ5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAGL,iBAAiB,EAIlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEzE,KAAK,aAAa,GAAG,oBAAoB,CAAC;AAkB1C,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,eAAe,EACrB,cAAc,CAAC,EAAE,cAAc,GAC9B,eAAe,CAqDjB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAE5F;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,2BAA2B,6DAIxF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACR,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;CACvD,GACA,oBAAoB,CAoGtB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACpC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B;AACD;;;;;;;;;;;;GAYG;AAEH,wBAAgB,2BAA2B,CACzC,sBAAsB,EAAE,sBAAsB,GAAG,SAAS,EAC1D,YAAY,CAAC,EAAE,MAAM,GACpB,oBAAoB,CAKtB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,EACtD,YAAY,CAAC,EAAE,MAAM,GACpB,aAAa,GAAG,gBAAgB,EAAE,CAuEpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,EACtD,YAAY,CAAC,EAAE,MAAM,GACpB,aAAa,GAAG,SAAS,CAI3B"}

package/dist/agents/model.js

@@ -89,7 +89,10 @@ function resolveModel(modelId, options) {
 	const [providerId, ...modelParts] = normalizedModelId.split("/");
 	const bareModelId = modelParts.join("/");
 	if (!providerId || !bareModelId) throw new Error(`Invalid model id: ${modelId}`);
+	const tenantCredentialStore = resolveCredentialStore(options?.requestContext);
+	const baseCredentialStore = tenantCredentialStore ?? getGlobalAuthStorage();
 	if (providerId === "amazon-bedrock") {
+		if (tenantCredentialStore?.allowEnvironmentFallback === false && !tenantCredentialStore.allowsDeploymentCredentials?.("amazon-bedrock")) throw new ProviderAuthRequiredError("Amazon Bedrock is not enabled for this Factory deployment. The operator must provide AWS credentials to the server and set FACTORY_DEPLOYMENT_MODEL_PROVIDERS=amazon-bedrock.");
 		const bedrockGateway = createAmazonBedrockGateway();
 		const routerId = `${AMAZON_BEDROCK_GATEWAY_ID}/${bareModelId}`;
 		const auth = bedrockGateway.resolveAuth({
@@ -108,7 +111,7 @@ function resolveModel(modelId, options) {
 	const routerId = `${MASTRACODE_GATEWAY_ID}/${normalizedModelId}`;
 	const mgApiKey = MastraCodeGateway.getMastraGatewayApiKey();
 	const rawGatewayBase = settings.memoryGateway?.baseUrl ?? process.env["MASTRA_GATEWAY_URL"] ?? "https://gateway-api.mastra.ai";
-	const credentialStore = createRequestScopedCredentialStore(resolveCredentialStore(options?.requestContext) ?? getGlobalAuthStorage(), options?.requestContext);
+	const credentialStore = createRequestScopedCredentialStore(baseCredentialStore, options?.requestContext);
 	const gateway = createMastraCodeGateway({
 		mastraGatewayBaseUrl: rawGatewayBase.replace(/\/+$/, "").replace(/\/v1$/, ""),
 		mastraGatewayApiKey: mgApiKey,

package/dist/agents/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","names":[],"sources":["../../src/agents/model.ts"],"sourcesContent":["import type { ModelWithRetries } from '@mastra/core/agent';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { GatewayLanguageModel, MastraModelGatewayInterface } from '@mastra/core/llm';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport { getRequestAccountSelection, isRequestAccountRoutingExhausted } from '../auth/account-routing-context.js';\nimport { ProviderAuthRequiredError } from '../auth/provider-auth-error.js';\nimport type { CredentialStore, OAuthAccountRecord } from '../auth/types.js';\nimport { MODEL_ROUTE_MAX_ENTRIES } from '../constants.js';\nimport {\n  loadSettings,\n  resolveDefaultThinkingLevel,\n  stripMastraCodeCustomProviderPrefix,\n} from '../onboarding/settings.js';\nimport { AMAZON_BEDROCK_GATEWAY_ID, createAmazonBedrockGateway } from '../providers/amazon-bedrock-gateway.js';\nimport type { AnthropicPromptCacheScope } from '../providers/anthropic-prompt-cache.js';\nimport { isThinkingLevelSetting } from '../thinking.js';\nimport type { ThinkingLevelSetting } from '../thinking.js';\nimport { resolveCredentialStore } from './credential-resolver.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\nimport {\n  MASTRA_GATEWAY_PREFIX,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  getGlobalAuthStorage,\n  reloadAuthStorage,\n  stripMastraGatewayPrefix,\n} from './mastracode-gateway.js';\nimport type { MastraCodeGatewayOptions } from './mastracode-gateway.js';\n\nexport {\n  getAnthropicApiKey,\n  getOpenAIApiKey,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  remapOpenAIModelForCodexOAuth,\n  resolveAuth,\n} from './mastracode-gateway.js';\nexport type { MastraCodeCustomProvider, MastraCodeGatewayOptions } from './mastracode-gateway.js';\nexport {\n  setCredentialStoreProvider,\n  hasCredentialStoreProvider,\n  resolveTenantFromRequestContext,\n} from './credential-resolver.js';\nexport type { CredentialTenant, CredentialStoreProvider } from './credential-resolver.js';\nexport {\n  setCustomProvidersSource,\n  hasCustomProvidersSource,\n  resolveCustomProviders,\n} from './custom-provider-source.js';\nexport type { CustomProvidersSource } from './custom-provider-source.js';\n\ntype ResolvedModel = GatewayLanguageModel;\ntype ModelRequestHeaders = Record<string, string>;\n\nfunction getAgentControllerHeaders(requestContext?: RequestContext): ModelRequestHeaders | undefined {\n  const agentControllerContext = requestContext?.get('controller') as AgentControllerRequestContext<any> | undefined;\n  const headers = {\n    ...(agentControllerContext?.threadId ? { 'x-thread-id': agentControllerContext.threadId } : {}),\n    ...(agentControllerContext?.resourceId ? { 'x-resource-id': agentControllerContext.resourceId } : {}),\n  };\n\n  return Object.keys(headers).length > 0 ? headers : undefined;\n}\n\nfunction accountCredential(account: OAuthAccountRecord) {\n  const { type: _type, id: _id, label: _label, addedAt: _addedAt, active: _active, ...credential } = account;\n  return { type: 'oauth' as const, ...credential };\n}\n\nexport function createRequestScopedCredentialStore(\n  base: CredentialStore,\n  requestContext?: RequestContext,\n): CredentialStore {\n  const selectedId = (providerId: string) => getRequestAccountSelection(requestContext, providerId);\n  const selectedAccount = (providerId: string) => {\n    const accountInstanceId = selectedId(providerId);\n    return accountInstanceId\n      ? base.listAccounts?.(providerId).find(account => account.id === accountInstanceId)\n      : undefined;\n  };\n  // Routing rejected every account for this provider on this request. Fail\n  // closed on every credential read: falling through to `base` would use the\n  // provider's active account — the exhausted one routing just refused.\n  const rejectAll = (providerId: string) => isRequestAccountRoutingExhausted(requestContext, providerId);\n\n  return {\n    allowEnvironmentFallback: base.allowEnvironmentFallback,\n    reload: () => base.reload(),\n    get: providerId => {\n      if (rejectAll(providerId)) return undefined;\n      // A selection that no longer resolves (the account was removed between\n      // routing and the credential read) must not fall through to the active\n      // account — that is the account routing deliberately passed over.\n      const accountInstanceId = selectedId(providerId);\n      if (accountInstanceId === undefined) return base.get(providerId);\n      const selected = selectedAccount(providerId);\n      return selected ? accountCredential(selected) : undefined;\n    },\n    getStoredApiKey: providerId => {\n      if (rejectAll(providerId)) return undefined;\n      // The provider-wide `apikey:` slot is never the credential routing\n      // selected, so serving it to a routed request is an OAuth -> API-key\n      // fallback of the same provider — the one combination this feature\n      // forbids. Unlike `get`, this read has no account argument to pass\n      // through, so a selection fails it closed instead.\n      if (selectedId(providerId) !== undefined) return undefined;\n      return base.getStoredApiKey(providerId);\n    },\n    getApiKey: providerId =>\n      rejectAll(providerId) ? Promise.resolve(undefined) : base.getApiKey(providerId, selectedId(providerId)),\n    getOAuthCredential: base.getOAuthCredential\n      ? providerId =>\n          rejectAll(providerId)\n            ? Promise.resolve(undefined)\n            : base.getOAuthCredential!(providerId, selectedId(providerId))\n      : undefined,\n    listAccounts: base.listAccounts ? providerId => base.listAccounts!(providerId) : undefined,\n    getActiveAccount: base.getActiveAccount ? providerId => base.getActiveAccount!(providerId) : undefined,\n    activateAccount: base.activateAccount\n      ? (providerId, accountInstanceId) => base.activateAccount!(providerId, accountInstanceId)\n      : undefined,\n    removeAccount: base.removeAccount\n      ? (providerId, accountInstanceId) => base.removeAccount!(providerId, accountInstanceId)\n      : undefined,\n  };\n}\n\nexport function createMastraCodeGateway(options: MastraCodeGatewayOptions): MastraCodeGateway {\n  return new MastraCodeGateway(options);\n}\n\nexport function createMastraCodeModelCatalogProvider(gateway: MastraModelGatewayInterface) {\n  return gateway instanceof MastraCodeGateway\n    ? gateway.createModelCatalogProvider()\n    : MastraCodeGateway.createModelCatalogProvider(gateway);\n}\n\n/**\n * Placeholder for future model ID normalization.\n * Currently returns the input unchanged, but exists as a seam\n * for aliasing, casing fixes, or validation in the future.\n */\nexport function resolveModelId(modelId: string): string {\n  return modelId;\n}\n\n/**\n * Resolve a model ID to the correct provider instance.\n * Shared by the main agent, observer, and reflector.\n *\n * - For anthropic/* models: Uses stored OAuth credentials when present, otherwise direct API key\n * - For openai/* models: Uses OAuth when configured, otherwise direct API key from AuthStorage\n * - For moonshotai/* models: Uses Moonshot AI Anthropic-compatible endpoint\n * - For all other providers: Uses Mastra's model router (models.dev gateway)\n */\nexport function resolveModel(\n  modelId: string,\n  options?: {\n    thinkingLevel?: ThinkingLevelSetting;\n    remapForCodexOAuth?: boolean;\n    requestContext?: RequestContext;\n    anthropicPromptCacheScope?: AnthropicPromptCacheScope;\n  },\n): GatewayLanguageModel {\n  reloadAuthStorage();\n  const headers = getAgentControllerHeaders(options?.requestContext);\n  const settings = loadSettings();\n  // Bedrock was previously cataloged under the MastraCode gateway namespace\n  // (`mastracode/amazon-bedrock/<model>`). Normalize any legacy saved ids to the\n  // standalone `amazon-bedrock/<model>` form so they resolve through the\n  // dedicated Bedrock gateway.\n  const bedrockLegacyPrefix = `${MASTRACODE_GATEWAY_ID}/amazon-bedrock/`;\n  const bedrockNormalizedInput = modelId.startsWith(bedrockLegacyPrefix)\n    ? modelId.slice(MASTRACODE_GATEWAY_ID.length + 1)\n    : modelId;\n  // Deployed web registers a custom providers source (DB-backed, tenant\n  // scoped); when registered it is authoritative and settings.json custom\n  // providers are ignored. Undefined = local settings-based behavior.\n  const customProviders = resolveCustomProviders(options?.requestContext) ?? settings.customProviders;\n  // Ids selected from the shared /models catalog were previously persisted in\n  // the gateway-qualified `mastracode/<customProviderId>/<model>` form, which\n  // parses the provider as `mastracode` and breaks provider config lookup.\n  // Normalize at resolution time (in addition to stripping at selection time)\n  // so already-saved ids and any surface that persists the raw catalog id\n  // still resolve to the custom provider.\n  const normalizedInput = stripMastraCodeCustomProviderPrefix(bedrockNormalizedInput, customProviders);\n  const isMastraGatewayModel = normalizedInput.startsWith(MASTRA_GATEWAY_PREFIX);\n  const normalizedModelId = stripMastraGatewayPrefix(normalizedInput);\n  const [providerId, ...modelParts] = normalizedModelId.split('/');\n  const bareModelId = modelParts.join('/');\n  if (!providerId || !bareModelId) {\n    throw new Error(`Invalid model id: ${modelId}`);\n  }\n\n  if (providerId === AMAZON_BEDROCK_GATEWAY_ID) {\n    const bedrockGateway = createAmazonBedrockGateway();\n    const routerId = `${AMAZON_BEDROCK_GATEWAY_ID}/${bareModelId}`;\n    const auth = bedrockGateway.resolveAuth({\n      gatewayId: AMAZON_BEDROCK_GATEWAY_ID,\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      routerId,\n    });\n    return bedrockGateway.resolveLanguageModel({\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      apiKey: auth?.apiKey ?? '',\n      headers,\n    });\n  }\n\n  const routerId = `${MASTRACODE_GATEWAY_ID}/${normalizedModelId}`;\n\n  const mgApiKey = MastraCodeGateway.getMastraGatewayApiKey();\n  const rawGatewayBase =\n    settings.memoryGateway?.baseUrl ?? process.env['MASTRA_GATEWAY_URL'] ?? 'https://gateway-api.mastra.ai';\n  // Deployed web registers a per-tenant credential store provider; when the\n  // request carries an authenticated tenant, resolve credentials through the\n  // caller's own store (user > org > env). Undefined = global AuthStorage.\n  const baseCredentialStore = resolveCredentialStore(options?.requestContext) ?? getGlobalAuthStorage();\n  const credentialStore = createRequestScopedCredentialStore(baseCredentialStore, options?.requestContext);\n  const gateway = createMastraCodeGateway({\n    mastraGatewayBaseUrl: rawGatewayBase.replace(/\\/+$/, '').replace(/\\/v1$/, ''),\n    mastraGatewayApiKey: mgApiKey,\n    routeThroughMastraGateway: Boolean(mgApiKey && isMastraGatewayModel),\n    thinkingLevel: options?.thinkingLevel,\n    anthropicPromptCacheScope: options?.anthropicPromptCacheScope,\n    customProviders,\n    credentialStore,\n  });\n\n  const auth = gateway.resolveAuth({\n    gatewayId: MASTRACODE_GATEWAY_ID,\n    providerId,\n    modelId: bareModelId,\n    routerId,\n  });\n\n  if (!auth && credentialStore?.allowEnvironmentFallback === false) {\n    throw new ProviderAuthRequiredError(\n      `No usable ${providerId} credential is configured for this signed-in Factory account. Connect the provider or add an organization credential, then try again.`,\n    );\n  }\n\n  return gateway.resolveLanguageModel({\n    providerId,\n    modelId: bareModelId,\n    apiKey: auth?.apiKey ?? '',\n    headers,\n  });\n}\n\nexport interface ThinkingRequestContext {\n  state?: { thinkingLevel?: unknown };\n  session?: { modeId?: string };\n}\n/**\n * Resolve the effective thinking level for the current request.\n *\n * Precedence:\n *   1. Session override (`state.thinkingLevel`, set via /think or the session\n *      settings panel).\n *   2. Per-mode default from settings (`models.modeThinkingDefaults[mode]`).\n *   3. Global default (`preferences.thinkingLevel`).\n *\n * Resolved per-request (not seeded at session start) so configuration changes\n * apply to the next request of every session — including automated\n * (rule-driven) Factory runs that nobody ever opens interactively.\n */\n\nexport function resolveRequestThinkingLevel(\n  agentControllerContext: ThinkingRequestContext | undefined,\n  settingsPath?: string,\n): ThinkingLevelSetting {\n  const override = agentControllerContext?.state?.thinkingLevel;\n  if (isThinkingLevelSetting(override)) return override;\n  const modeId = agentControllerContext?.session?.modeId;\n  return resolveDefaultThinkingLevel(loadSettings(settingsPath), modeId).level;\n}\n\n/**\n * Dynamic model function that reads the current model and optional ordered\n * fallback route from controller state. Route entry ids are opaque host-owned\n * identifiers; repeated ids receive occurrence suffixes because core tracks the\n * active fallback index by id across agentic steps.\n */\nexport function getDynamicModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel | ModelWithRetries[] {\n  const controller = requestContext.get('controller') as AgentControllerRequestContext<any> | undefined;\n  const state = controller?.getState?.() as\n    | {\n        modelRoute?: {\n          entries?: Array<{ id?: unknown; modelId?: unknown }>;\n        };\n        mastracodePendingModelFallback?: { toEntryId?: unknown; toModelId?: unknown; threadId?: unknown } | null;\n      }\n    | undefined;\n  const pendingState = state?.mastracodePendingModelFallback;\n  const pendingFallback =\n    pendingState &&\n    (pendingState.threadId === undefined ||\n      (typeof pendingState.threadId === 'string' && pendingState.threadId === controller?.threadId))\n      ? pendingState\n      : undefined;\n  const pendingModelId =\n    pendingFallback && typeof pendingFallback.toModelId === 'string' && pendingFallback.toModelId.length > 0\n      ? pendingFallback.toModelId\n      : undefined;\n  const modelId = pendingModelId ?? controller?.session?.modelId;\n  if (!modelId) {\n    if (!controller) {\n      throw new Error(\n        'No model available: this run started without a controller session context, so no model selection could be resolved.',\n      );\n    }\n    throw new Error('No model selected. Use /models to select a model first.');\n  }\n\n  const thinkingLevel = resolveRequestThinkingLevel(controller, settingsPath);\n  const resolveOptions = { thinkingLevel, remapForCodexOAuth: true, requestContext } as const;\n  const primary = resolveModel(modelId, resolveOptions);\n  const route = state?.modelRoute?.entries?.slice(0, MODEL_ROUTE_MAX_ENTRIES);\n  const pendingEntryId =\n    pendingFallback && typeof pendingFallback.toEntryId === 'string' ? pendingFallback.toEntryId : undefined;\n  const startIndex = pendingEntryId ? route?.findIndex(entry => entry.id === pendingEntryId) : 0;\n  const activeRoute = route && startIndex !== undefined && startIndex >= 0 ? route.slice(startIndex) : undefined;\n  if (!activeRoute || activeRoute.length < 2 || activeRoute[0]?.modelId !== modelId) return primary;\n\n  const firstId =\n    typeof activeRoute[0]?.id === 'string' && activeRoute[0].id.length > 0 ? activeRoute[0].id : undefined;\n  if (!firstId) return primary;\n\n  const entries: ModelWithRetries[] = [{ id: firstId, model: primary }];\n  const appearances = new Map<string, number>([[firstId, 1]]);\n  for (const routeEntry of activeRoute.slice(1)) {\n    if (\n      typeof routeEntry.id !== 'string' ||\n      routeEntry.id.length === 0 ||\n      typeof routeEntry.modelId !== 'string' ||\n      routeEntry.modelId.length === 0\n    ) {\n      break;\n    }\n    let entryModel: ResolvedModel;\n    try {\n      entryModel = resolveModel(routeEntry.modelId, resolveOptions);\n    } catch {\n      break;\n    }\n    const occurrence = (appearances.get(routeEntry.id) ?? 0) + 1;\n    appearances.set(routeEntry.id, occurrence);\n    entries.push({\n      id: occurrence === 1 ? routeEntry.id : `${routeEntry.id}#${occurrence}`,\n      model: entryModel,\n    });\n  }\n\n  return entries.length < 2 ? primary : entries;\n}\n\n/**\n * Goal judge model resolver for the agent's `goal.judge` config. Resolves the\n * configured goal judge model through mastracode's gateway so provider\n * credentials (stored in auth storage, not just env) are injected — a bare model\n * id handed to core's default model router would fail to find the API key.\n *\n * Returns `undefined` when no judge model is configured, which keeps the goal\n * step a complete no-op (the goal mechanism requires a judge to do anything).\n *\n * `settingsPath` must be the same source `createMastraCode()` reads from so the\n * judge model and the goal budget (`goalMaxTurns`) come from one config — with a\n * custom `settingsPath` a bare `loadSettings()` here could read a different file\n * and silently turn the goal step into a no-op.\n */\nexport function getGoalJudgeModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel | undefined {\n  const judgeModelId = loadSettings(settingsPath).models.goalJudgeModel;\n  if (!judgeModelId) return undefined;\n  return resolveModel(judgeModelId, { remapForCodexOAuth: true, requestContext });\n}\n"],"mappings":";;;;;;;;;;;AAsDA,SAAS,0BAA0B,gBAAkE;CACnG,MAAM,yBAAyB,gBAAgB,IAAI,YAAY;CAC/D,MAAM,UAAU;EACd,GAAI,wBAAwB,WAAW,EAAE,eAAe,uBAAuB,SAAS,IAAI,CAAC;EAC7F,GAAI,wBAAwB,aAAa,EAAE,iBAAiB,uBAAuB,WAAW,IAAI,CAAC;CACrG;CAEA,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI,UAAU,KAAA;AACrD;AAEA,SAAS,kBAAkB,SAA6B;CACtD,MAAM,EAAE,MAAM,OAAO,IAAI,KAAK,OAAO,QAAQ,SAAS,UAAU,QAAQ,SAAS,GAAG,eAAe;CACnG,OAAO;EAAE,MAAM;EAAkB,GAAG;CAAW;AACjD;AAEA,SAAgB,mCACd,MACA,gBACiB;CACjB,MAAM,cAAc,eAAuB,2BAA2B,gBAAgB,UAAU;CAChG,MAAM,mBAAmB,eAAuB;EAC9C,MAAM,oBAAoB,WAAW,UAAU;EAC/C,OAAO,oBACH,KAAK,eAAe,UAAU,CAAC,CAAC,MAAK,YAAW,QAAQ,OAAO,iBAAiB,IAChF,KAAA;CACN;CAIA,MAAM,aAAa,eAAuB,iCAAiC,gBAAgB,UAAU;CAErG,OAAO;EACL,0BAA0B,KAAK;EAC/B,cAAc,KAAK,OAAO;EAC1B,MAAK,eAAc;GACjB,IAAI,UAAU,UAAU,GAAG,OAAO,KAAA;GAKlC,IAD0B,WAAW,UACjB,MAAM,KAAA,GAAW,OAAO,KAAK,IAAI,UAAU;GAC/D,MAAM,WAAW,gBAAgB,UAAU;GAC3C,OAAO,WAAW,kBAAkB,QAAQ,IAAI,KAAA;EAClD;EACA,kBAAiB,eAAc;GAC7B,IAAI,UAAU,UAAU,GAAG,OAAO,KAAA;GAMlC,IAAI,WAAW,UAAU,MAAM,KAAA,GAAW,OAAO,KAAA;GACjD,OAAO,KAAK,gBAAgB,UAAU;EACxC;EACA,YAAW,eACT,UAAU,UAAU,IAAI,QAAQ,QAAQ,KAAA,CAAS,IAAI,KAAK,UAAU,YAAY,WAAW,UAAU,CAAC;EACxG,oBAAoB,KAAK,sBACrB,eACE,UAAU,UAAU,IAChB,QAAQ,QAAQ,KAAA,CAAS,IACzB,KAAK,mBAAoB,YAAY,WAAW,UAAU,CAAC,IACjE,KAAA;EACJ,cAAc,KAAK,gBAAe,eAAc,KAAK,aAAc,UAAU,IAAI,KAAA;EACjF,kBAAkB,KAAK,oBAAmB,eAAc,KAAK,iBAAkB,UAAU,IAAI,KAAA;EAC7F,iBAAiB,KAAK,mBACjB,YAAY,sBAAsB,KAAK,gBAAiB,YAAY,iBAAiB,IACtF,KAAA;EACJ,eAAe,KAAK,iBACf,YAAY,sBAAsB,KAAK,cAAe,YAAY,iBAAiB,IACpF,KAAA;CACN;AACF;AAEA,SAAgB,wBAAwB,SAAsD;CAC5F,OAAO,IAAI,kBAAkB,OAAO;AACtC;AAEA,SAAgB,qCAAqC,SAAsC;CACzF,OAAO,mBAAmB,oBACtB,QAAQ,2BAA2B,IACnC,kBAAkB,2BAA2B,OAAO;AAC1D;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,aACd,SACA,SAMsB;CACtB,kBAAkB;CAClB,MAAM,UAAU,0BAA0B,SAAS,cAAc;CACjE,MAAM,WAAW,aAAa;CAK9B,MAAM,sBAAsB,GAAG,sBAAsB;CACrD,MAAM,yBAAyB,QAAQ,WAAW,mBAAmB,IACjE,QAAQ,MAAM,sBAAsB,SAAS,CAAC,IAC9C;CAIJ,MAAM,kBAAkB,uBAAuB,SAAS,cAAc,KAAK,SAAS;CAOpF,MAAM,kBAAkB,oCAAoC,wBAAwB,eAAe;CACnG,MAAM,uBAAuB,gBAAgB,WAAW,qBAAqB;CAC7E,MAAM,oBAAoB,yBAAyB,eAAe;CAClE,MAAM,CAAC,YAAY,GAAG,cAAc,kBAAkB,MAAM,GAAG;CAC/D,MAAM,cAAc,WAAW,KAAK,GAAG;CACvC,IAAI,CAAC,cAAc,CAAC,aAClB,MAAM,IAAI,MAAM,qBAAqB,SAAS;CAGhD,IAAI,eAAA,kBAA0C;EAC5C,MAAM,iBAAiB,2BAA2B;EAClD,MAAM,WAAW,GAAG,0BAA0B,GAAG;EACjD,MAAM,OAAO,eAAe,YAAY;GACtC,WAAW;GACX,YAAY;GACZ,SAAS;GACT;EACF,CAAC;EACD,OAAO,eAAe,qBAAqB;GACzC,YAAY;GACZ,SAAS;GACT,QAAQ,MAAM,UAAU;GACxB;EACF,CAAC;CACH;CAEA,MAAM,WAAW,GAAG,sBAAsB,GAAG;CAE7C,MAAM,WAAW,kBAAkB,uBAAuB;CAC1D,MAAM,iBACJ,SAAS,eAAe,WAAW,QAAQ,IAAI,yBAAyB;CAK1E,MAAM,kBAAkB,mCADI,uBAAuB,SAAS,cAAc,KAAK,qBAAqB,GACpB,SAAS,cAAc;CACvG,MAAM,UAAU,wBAAwB;EACtC,sBAAsB,eAAe,QAAQ,QAAQ,EAAE,CAAC,CAAC,QAAQ,SAAS,EAAE;EAC5E,qBAAqB;EACrB,2BAA2B,QAAQ,YAAY,oBAAoB;EACnE,eAAe,SAAS;EACxB,2BAA2B,SAAS;EACpC;EACA;CACF,CAAC;CAED,MAAM,OAAO,QAAQ,YAAY;EAC/B,WAAW;EACX;EACA,SAAS;EACT;CACF,CAAC;CAED,IAAI,CAAC,QAAQ,iBAAiB,6BAA6B,OACzD,MAAM,IAAI,0BACR,aAAa,WAAW,sIAC1B;CAGF,OAAO,QAAQ,qBAAqB;EAClC;EACA,SAAS;EACT,QAAQ,MAAM,UAAU;EACxB;CACF,CAAC;AACH;;;;;;;;;;;;;;AAoBA,SAAgB,4BACd,wBACA,cACsB;CACtB,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,uBAAuB,QAAQ,GAAG,OAAO;CAC7C,MAAM,SAAS,wBAAwB,SAAS;CAChD,OAAO,4BAA4B,aAAa,YAAY,GAAG,MAAM,CAAC,CAAC;AACzE;;;;;;;AAQA,SAAgB,gBACd,EAAE,kBACF,cACoC;CACpC,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,MAAM,QAAQ,YAAY,WAAW;CAQrC,MAAM,eAAe,OAAO;CAC5B,MAAM,kBACJ,iBACC,aAAa,aAAa,KAAA,KACxB,OAAO,aAAa,aAAa,YAAY,aAAa,aAAa,YAAY,YAClF,eACA,KAAA;CAKN,MAAM,WAHJ,mBAAmB,OAAO,gBAAgB,cAAc,YAAY,gBAAgB,UAAU,SAAS,IACnG,gBAAgB,YAChB,KAAA,MAC4B,YAAY,SAAS;CACvD,IAAI,CAAC,SAAS;EACZ,IAAI,CAAC,YACH,MAAM,IAAI,MACR,qHACF;EAEF,MAAM,IAAI,MAAM,yDAAyD;CAC3E;CAGA,MAAM,iBAAiB;EAAE,eADH,4BAA4B,YAAY,YACzB;EAAG,oBAAoB;EAAM;CAAe;CACjF,MAAM,UAAU,aAAa,SAAS,cAAc;CACpD,MAAM,QAAQ,OAAO,YAAY,SAAS,MAAM,GAAA,EAA0B;CAC1E,MAAM,iBACJ,mBAAmB,OAAO,gBAAgB,cAAc,WAAW,gBAAgB,YAAY,KAAA;CACjG,MAAM,aAAa,iBAAiB,OAAO,WAAU,UAAS,MAAM,OAAO,cAAc,IAAI;CAC7F,MAAM,cAAc,SAAS,eAAe,KAAA,KAAa,cAAc,IAAI,MAAM,MAAM,UAAU,IAAI,KAAA;CACrG,IAAI,CAAC,eAAe,YAAY,SAAS,KAAK,YAAY,EAAE,EAAE,YAAY,SAAS,OAAO;CAE1F,MAAM,UACJ,OAAO,YAAY,EAAE,EAAE,OAAO,YAAY,YAAY,EAAE,CAAC,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC,KAAK,KAAA;CAC/F,IAAI,CAAC,SAAS,OAAO;CAErB,MAAM,UAA8B,CAAC;EAAE,IAAI;EAAS,OAAO;CAAQ,CAAC;CACpE,MAAM,8BAAc,IAAI,IAAoB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;CAC1D,KAAK,MAAM,cAAc,YAAY,MAAM,CAAC,GAAG;EAC7C,IACE,OAAO,WAAW,OAAO,YACzB,WAAW,GAAG,WAAW,KACzB,OAAO,WAAW,YAAY,YAC9B,WAAW,QAAQ,WAAW,GAE9B;EAEF,IAAI;EACJ,IAAI;GACF,aAAa,aAAa,WAAW,SAAS,cAAc;EAC9D,QAAQ;GACN;EACF;EACA,MAAM,cAAc,YAAY,IAAI,WAAW,EAAE,KAAK,KAAK;EAC3D,YAAY,IAAI,WAAW,IAAI,UAAU;EACzC,QAAQ,KAAK;GACX,IAAI,eAAe,IAAI,WAAW,KAAK,GAAG,WAAW,GAAG,GAAG;GAC3D,OAAO;EACT,CAAC;CACH;CAEA,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;;;;;;;;;;;;;;;AAgBA,SAAgB,kBACd,EAAE,kBACF,cAC2B;CAC3B,MAAM,eAAe,aAAa,YAAY,CAAC,CAAC,OAAO;CACvD,IAAI,CAAC,cAAc,OAAO,KAAA;CAC1B,OAAO,aAAa,cAAc;EAAE,oBAAoB;EAAM;CAAe,CAAC;AAChF"}
+{"version":3,"file":"model.js","names":[],"sources":["../../src/agents/model.ts"],"sourcesContent":["import type { ModelWithRetries } from '@mastra/core/agent';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { GatewayLanguageModel, MastraModelGatewayInterface } from '@mastra/core/llm';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport { getRequestAccountSelection, isRequestAccountRoutingExhausted } from '../auth/account-routing-context.js';\nimport { ProviderAuthRequiredError } from '../auth/provider-auth-error.js';\nimport type { CredentialStore, OAuthAccountRecord } from '../auth/types.js';\nimport { MODEL_ROUTE_MAX_ENTRIES } from '../constants.js';\nimport {\n  loadSettings,\n  resolveDefaultThinkingLevel,\n  stripMastraCodeCustomProviderPrefix,\n} from '../onboarding/settings.js';\nimport { AMAZON_BEDROCK_GATEWAY_ID, createAmazonBedrockGateway } from '../providers/amazon-bedrock-gateway.js';\nimport type { AnthropicPromptCacheScope } from '../providers/anthropic-prompt-cache.js';\nimport { isThinkingLevelSetting } from '../thinking.js';\nimport type { ThinkingLevelSetting } from '../thinking.js';\nimport { resolveCredentialStore } from './credential-resolver.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\nimport {\n  MASTRA_GATEWAY_PREFIX,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  getGlobalAuthStorage,\n  reloadAuthStorage,\n  stripMastraGatewayPrefix,\n} from './mastracode-gateway.js';\nimport type { MastraCodeGatewayOptions } from './mastracode-gateway.js';\n\nexport {\n  getAnthropicApiKey,\n  getOpenAIApiKey,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  remapOpenAIModelForCodexOAuth,\n  resolveAuth,\n} from './mastracode-gateway.js';\nexport type { MastraCodeCustomProvider, MastraCodeGatewayOptions } from './mastracode-gateway.js';\nexport {\n  setCredentialStoreProvider,\n  hasCredentialStoreProvider,\n  resolveTenantFromRequestContext,\n} from './credential-resolver.js';\nexport type { CredentialTenant, CredentialStoreProvider } from './credential-resolver.js';\nexport {\n  setCustomProvidersSource,\n  hasCustomProvidersSource,\n  resolveCustomProviders,\n} from './custom-provider-source.js';\nexport type { CustomProvidersSource } from './custom-provider-source.js';\n\ntype ResolvedModel = GatewayLanguageModel;\ntype ModelRequestHeaders = Record<string, string>;\n\nfunction getAgentControllerHeaders(requestContext?: RequestContext): ModelRequestHeaders | undefined {\n  const agentControllerContext = requestContext?.get('controller') as AgentControllerRequestContext<any> | undefined;\n  const headers = {\n    ...(agentControllerContext?.threadId ? { 'x-thread-id': agentControllerContext.threadId } : {}),\n    ...(agentControllerContext?.resourceId ? { 'x-resource-id': agentControllerContext.resourceId } : {}),\n  };\n\n  return Object.keys(headers).length > 0 ? headers : undefined;\n}\n\nfunction accountCredential(account: OAuthAccountRecord) {\n  const { type: _type, id: _id, label: _label, addedAt: _addedAt, active: _active, ...credential } = account;\n  return { type: 'oauth' as const, ...credential };\n}\n\nexport function createRequestScopedCredentialStore(\n  base: CredentialStore,\n  requestContext?: RequestContext,\n): CredentialStore {\n  const selectedId = (providerId: string) => getRequestAccountSelection(requestContext, providerId);\n  const selectedAccount = (providerId: string) => {\n    const accountInstanceId = selectedId(providerId);\n    return accountInstanceId\n      ? base.listAccounts?.(providerId).find(account => account.id === accountInstanceId)\n      : undefined;\n  };\n  // Routing rejected every account for this provider on this request. Fail\n  // closed on every credential read: falling through to `base` would use the\n  // provider's active account — the exhausted one routing just refused.\n  const rejectAll = (providerId: string) => isRequestAccountRoutingExhausted(requestContext, providerId);\n\n  return {\n    allowEnvironmentFallback: base.allowEnvironmentFallback,\n    reload: () => base.reload(),\n    get: providerId => {\n      if (rejectAll(providerId)) return undefined;\n      // A selection that no longer resolves (the account was removed between\n      // routing and the credential read) must not fall through to the active\n      // account — that is the account routing deliberately passed over.\n      const accountInstanceId = selectedId(providerId);\n      if (accountInstanceId === undefined) return base.get(providerId);\n      const selected = selectedAccount(providerId);\n      return selected ? accountCredential(selected) : undefined;\n    },\n    getStoredApiKey: providerId => {\n      if (rejectAll(providerId)) return undefined;\n      // The provider-wide `apikey:` slot is never the credential routing\n      // selected, so serving it to a routed request is an OAuth -> API-key\n      // fallback of the same provider — the one combination this feature\n      // forbids. Unlike `get`, this read has no account argument to pass\n      // through, so a selection fails it closed instead.\n      if (selectedId(providerId) !== undefined) return undefined;\n      return base.getStoredApiKey(providerId);\n    },\n    getApiKey: providerId =>\n      rejectAll(providerId) ? Promise.resolve(undefined) : base.getApiKey(providerId, selectedId(providerId)),\n    getOAuthCredential: base.getOAuthCredential\n      ? providerId =>\n          rejectAll(providerId)\n            ? Promise.resolve(undefined)\n            : base.getOAuthCredential!(providerId, selectedId(providerId))\n      : undefined,\n    listAccounts: base.listAccounts ? providerId => base.listAccounts!(providerId) : undefined,\n    getActiveAccount: base.getActiveAccount ? providerId => base.getActiveAccount!(providerId) : undefined,\n    activateAccount: base.activateAccount\n      ? (providerId, accountInstanceId) => base.activateAccount!(providerId, accountInstanceId)\n      : undefined,\n    removeAccount: base.removeAccount\n      ? (providerId, accountInstanceId) => base.removeAccount!(providerId, accountInstanceId)\n      : undefined,\n  };\n}\n\nexport function createMastraCodeGateway(options: MastraCodeGatewayOptions): MastraCodeGateway {\n  return new MastraCodeGateway(options);\n}\n\nexport function createMastraCodeModelCatalogProvider(gateway: MastraModelGatewayInterface) {\n  return gateway instanceof MastraCodeGateway\n    ? gateway.createModelCatalogProvider()\n    : MastraCodeGateway.createModelCatalogProvider(gateway);\n}\n\n/**\n * Placeholder for future model ID normalization.\n * Currently returns the input unchanged, but exists as a seam\n * for aliasing, casing fixes, or validation in the future.\n */\nexport function resolveModelId(modelId: string): string {\n  return modelId;\n}\n\n/**\n * Resolve a model ID to the correct provider instance.\n * Shared by the main agent, observer, and reflector.\n *\n * - For anthropic/* models: Uses stored OAuth credentials when present, otherwise direct API key\n * - For openai/* models: Uses OAuth when configured, otherwise direct API key from AuthStorage\n * - For moonshotai/* models: Uses Moonshot AI Anthropic-compatible endpoint\n * - For all other providers: Uses Mastra's model router (models.dev gateway)\n */\nexport function resolveModel(\n  modelId: string,\n  options?: {\n    thinkingLevel?: ThinkingLevelSetting;\n    remapForCodexOAuth?: boolean;\n    requestContext?: RequestContext;\n    anthropicPromptCacheScope?: AnthropicPromptCacheScope;\n  },\n): GatewayLanguageModel {\n  reloadAuthStorage();\n  const headers = getAgentControllerHeaders(options?.requestContext);\n  const settings = loadSettings();\n  // Bedrock was previously cataloged under the MastraCode gateway namespace\n  // (`mastracode/amazon-bedrock/<model>`). Normalize any legacy saved ids to the\n  // standalone `amazon-bedrock/<model>` form so they resolve through the\n  // dedicated Bedrock gateway.\n  const bedrockLegacyPrefix = `${MASTRACODE_GATEWAY_ID}/amazon-bedrock/`;\n  const bedrockNormalizedInput = modelId.startsWith(bedrockLegacyPrefix)\n    ? modelId.slice(MASTRACODE_GATEWAY_ID.length + 1)\n    : modelId;\n  // Deployed web registers a custom providers source (DB-backed, tenant\n  // scoped); when registered it is authoritative and settings.json custom\n  // providers are ignored. Undefined = local settings-based behavior.\n  const customProviders = resolveCustomProviders(options?.requestContext) ?? settings.customProviders;\n  // Ids selected from the shared /models catalog were previously persisted in\n  // the gateway-qualified `mastracode/<customProviderId>/<model>` form, which\n  // parses the provider as `mastracode` and breaks provider config lookup.\n  // Normalize at resolution time (in addition to stripping at selection time)\n  // so already-saved ids and any surface that persists the raw catalog id\n  // still resolve to the custom provider.\n  const normalizedInput = stripMastraCodeCustomProviderPrefix(bedrockNormalizedInput, customProviders);\n  const isMastraGatewayModel = normalizedInput.startsWith(MASTRA_GATEWAY_PREFIX);\n  const normalizedModelId = stripMastraGatewayPrefix(normalizedInput);\n  const [providerId, ...modelParts] = normalizedModelId.split('/');\n  const bareModelId = modelParts.join('/');\n  if (!providerId || !bareModelId) {\n    throw new Error(`Invalid model id: ${modelId}`);\n  }\n\n  // Deployed web registers a per-tenant credential store provider; when the\n  // request carries an authenticated tenant, resolve credentials through the\n  // caller's own store (user > org > env). Undefined = global AuthStorage.\n  const tenantCredentialStore = resolveCredentialStore(options?.requestContext);\n  const baseCredentialStore = tenantCredentialStore ?? getGlobalAuthStorage();\n\n  if (providerId === AMAZON_BEDROCK_GATEWAY_ID) {\n    // Bedrock authenticates through the server process's AWS credential chain,\n    // never a tenant credential. A tenant store only lets it through when the\n    // operator opted the deployment in.\n    if (\n      tenantCredentialStore?.allowEnvironmentFallback === false &&\n      !tenantCredentialStore.allowsDeploymentCredentials?.(AMAZON_BEDROCK_GATEWAY_ID)\n    ) {\n      throw new ProviderAuthRequiredError(\n        'Amazon Bedrock is not enabled for this Factory deployment. The operator must provide AWS credentials to the server and set FACTORY_DEPLOYMENT_MODEL_PROVIDERS=amazon-bedrock.',\n      );\n    }\n    const bedrockGateway = createAmazonBedrockGateway();\n    const routerId = `${AMAZON_BEDROCK_GATEWAY_ID}/${bareModelId}`;\n    const auth = bedrockGateway.resolveAuth({\n      gatewayId: AMAZON_BEDROCK_GATEWAY_ID,\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      routerId,\n    });\n    return bedrockGateway.resolveLanguageModel({\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      apiKey: auth?.apiKey ?? '',\n      headers,\n    });\n  }\n\n  const routerId = `${MASTRACODE_GATEWAY_ID}/${normalizedModelId}`;\n\n  const mgApiKey = MastraCodeGateway.getMastraGatewayApiKey();\n  const rawGatewayBase =\n    settings.memoryGateway?.baseUrl ?? process.env['MASTRA_GATEWAY_URL'] ?? 'https://gateway-api.mastra.ai';\n  const credentialStore = createRequestScopedCredentialStore(baseCredentialStore, options?.requestContext);\n  const gateway = createMastraCodeGateway({\n    mastraGatewayBaseUrl: rawGatewayBase.replace(/\\/+$/, '').replace(/\\/v1$/, ''),\n    mastraGatewayApiKey: mgApiKey,\n    routeThroughMastraGateway: Boolean(mgApiKey && isMastraGatewayModel),\n    thinkingLevel: options?.thinkingLevel,\n    anthropicPromptCacheScope: options?.anthropicPromptCacheScope,\n    customProviders,\n    credentialStore,\n  });\n\n  const auth = gateway.resolveAuth({\n    gatewayId: MASTRACODE_GATEWAY_ID,\n    providerId,\n    modelId: bareModelId,\n    routerId,\n  });\n\n  if (!auth && credentialStore?.allowEnvironmentFallback === false) {\n    throw new ProviderAuthRequiredError(\n      `No usable ${providerId} credential is configured for this signed-in Factory account. Connect the provider or add an organization credential, then try again.`,\n    );\n  }\n\n  return gateway.resolveLanguageModel({\n    providerId,\n    modelId: bareModelId,\n    apiKey: auth?.apiKey ?? '',\n    headers,\n  });\n}\n\nexport interface ThinkingRequestContext {\n  state?: { thinkingLevel?: unknown };\n  session?: { modeId?: string };\n}\n/**\n * Resolve the effective thinking level for the current request.\n *\n * Precedence:\n *   1. Session override (`state.thinkingLevel`, set via /think or the session\n *      settings panel).\n *   2. Per-mode default from settings (`models.modeThinkingDefaults[mode]`).\n *   3. Global default (`preferences.thinkingLevel`).\n *\n * Resolved per-request (not seeded at session start) so configuration changes\n * apply to the next request of every session — including automated\n * (rule-driven) Factory runs that nobody ever opens interactively.\n */\n\nexport function resolveRequestThinkingLevel(\n  agentControllerContext: ThinkingRequestContext | undefined,\n  settingsPath?: string,\n): ThinkingLevelSetting {\n  const override = agentControllerContext?.state?.thinkingLevel;\n  if (isThinkingLevelSetting(override)) return override;\n  const modeId = agentControllerContext?.session?.modeId;\n  return resolveDefaultThinkingLevel(loadSettings(settingsPath), modeId).level;\n}\n\n/**\n * Dynamic model function that reads the current model and optional ordered\n * fallback route from controller state. Route entry ids are opaque host-owned\n * identifiers; repeated ids receive occurrence suffixes because core tracks the\n * active fallback index by id across agentic steps.\n */\nexport function getDynamicModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel | ModelWithRetries[] {\n  const controller = requestContext.get('controller') as AgentControllerRequestContext<any> | undefined;\n  const state = controller?.getState?.() as\n    | {\n        modelRoute?: {\n          entries?: Array<{ id?: unknown; modelId?: unknown }>;\n        };\n        mastracodePendingModelFallback?: { toEntryId?: unknown; toModelId?: unknown; threadId?: unknown } | null;\n      }\n    | undefined;\n  const pendingState = state?.mastracodePendingModelFallback;\n  const pendingFallback =\n    pendingState &&\n    (pendingState.threadId === undefined ||\n      (typeof pendingState.threadId === 'string' && pendingState.threadId === controller?.threadId))\n      ? pendingState\n      : undefined;\n  const pendingModelId =\n    pendingFallback && typeof pendingFallback.toModelId === 'string' && pendingFallback.toModelId.length > 0\n      ? pendingFallback.toModelId\n      : undefined;\n  const modelId = pendingModelId ?? controller?.session?.modelId;\n  if (!modelId) {\n    if (!controller) {\n      throw new Error(\n        'No model available: this run started without a controller session context, so no model selection could be resolved.',\n      );\n    }\n    throw new Error('No model selected. Use /models to select a model first.');\n  }\n\n  const thinkingLevel = resolveRequestThinkingLevel(controller, settingsPath);\n  const resolveOptions = { thinkingLevel, remapForCodexOAuth: true, requestContext } as const;\n  const primary = resolveModel(modelId, resolveOptions);\n  const route = state?.modelRoute?.entries?.slice(0, MODEL_ROUTE_MAX_ENTRIES);\n  const pendingEntryId =\n    pendingFallback && typeof pendingFallback.toEntryId === 'string' ? pendingFallback.toEntryId : undefined;\n  const startIndex = pendingEntryId ? route?.findIndex(entry => entry.id === pendingEntryId) : 0;\n  const activeRoute = route && startIndex !== undefined && startIndex >= 0 ? route.slice(startIndex) : undefined;\n  if (!activeRoute || activeRoute.length < 2 || activeRoute[0]?.modelId !== modelId) return primary;\n\n  const firstId =\n    typeof activeRoute[0]?.id === 'string' && activeRoute[0].id.length > 0 ? activeRoute[0].id : undefined;\n  if (!firstId) return primary;\n\n  const entries: ModelWithRetries[] = [{ id: firstId, model: primary }];\n  const appearances = new Map<string, number>([[firstId, 1]]);\n  for (const routeEntry of activeRoute.slice(1)) {\n    if (\n      typeof routeEntry.id !== 'string' ||\n      routeEntry.id.length === 0 ||\n      typeof routeEntry.modelId !== 'string' ||\n      routeEntry.modelId.length === 0\n    ) {\n      break;\n    }\n    let entryModel: ResolvedModel;\n    try {\n      entryModel = resolveModel(routeEntry.modelId, resolveOptions);\n    } catch {\n      break;\n    }\n    const occurrence = (appearances.get(routeEntry.id) ?? 0) + 1;\n    appearances.set(routeEntry.id, occurrence);\n    entries.push({\n      id: occurrence === 1 ? routeEntry.id : `${routeEntry.id}#${occurrence}`,\n      model: entryModel,\n    });\n  }\n\n  return entries.length < 2 ? primary : entries;\n}\n\n/**\n * Goal judge model resolver for the agent's `goal.judge` config. Resolves the\n * configured goal judge model through mastracode's gateway so provider\n * credentials (stored in auth storage, not just env) are injected — a bare model\n * id handed to core's default model router would fail to find the API key.\n *\n * Returns `undefined` when no judge model is configured, which keeps the goal\n * step a complete no-op (the goal mechanism requires a judge to do anything).\n *\n * `settingsPath` must be the same source `createMastraCode()` reads from so the\n * judge model and the goal budget (`goalMaxTurns`) come from one config — with a\n * custom `settingsPath` a bare `loadSettings()` here could read a different file\n * and silently turn the goal step into a no-op.\n */\nexport function getGoalJudgeModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel | undefined {\n  const judgeModelId = loadSettings(settingsPath).models.goalJudgeModel;\n  if (!judgeModelId) return undefined;\n  return resolveModel(judgeModelId, { remapForCodexOAuth: true, requestContext });\n}\n"],"mappings":";;;;;;;;;;;AAsDA,SAAS,0BAA0B,gBAAkE;CACnG,MAAM,yBAAyB,gBAAgB,IAAI,YAAY;CAC/D,MAAM,UAAU;EACd,GAAI,wBAAwB,WAAW,EAAE,eAAe,uBAAuB,SAAS,IAAI,CAAC;EAC7F,GAAI,wBAAwB,aAAa,EAAE,iBAAiB,uBAAuB,WAAW,IAAI,CAAC;CACrG;CAEA,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI,UAAU,KAAA;AACrD;AAEA,SAAS,kBAAkB,SAA6B;CACtD,MAAM,EAAE,MAAM,OAAO,IAAI,KAAK,OAAO,QAAQ,SAAS,UAAU,QAAQ,SAAS,GAAG,eAAe;CACnG,OAAO;EAAE,MAAM;EAAkB,GAAG;CAAW;AACjD;AAEA,SAAgB,mCACd,MACA,gBACiB;CACjB,MAAM,cAAc,eAAuB,2BAA2B,gBAAgB,UAAU;CAChG,MAAM,mBAAmB,eAAuB;EAC9C,MAAM,oBAAoB,WAAW,UAAU;EAC/C,OAAO,oBACH,KAAK,eAAe,UAAU,CAAC,CAAC,MAAK,YAAW,QAAQ,OAAO,iBAAiB,IAChF,KAAA;CACN;CAIA,MAAM,aAAa,eAAuB,iCAAiC,gBAAgB,UAAU;CAErG,OAAO;EACL,0BAA0B,KAAK;EAC/B,cAAc,KAAK,OAAO;EAC1B,MAAK,eAAc;GACjB,IAAI,UAAU,UAAU,GAAG,OAAO,KAAA;GAKlC,IAD0B,WAAW,UACjB,MAAM,KAAA,GAAW,OAAO,KAAK,IAAI,UAAU;GAC/D,MAAM,WAAW,gBAAgB,UAAU;GAC3C,OAAO,WAAW,kBAAkB,QAAQ,IAAI,KAAA;EAClD;EACA,kBAAiB,eAAc;GAC7B,IAAI,UAAU,UAAU,GAAG,OAAO,KAAA;GAMlC,IAAI,WAAW,UAAU,MAAM,KAAA,GAAW,OAAO,KAAA;GACjD,OAAO,KAAK,gBAAgB,UAAU;EACxC;EACA,YAAW,eACT,UAAU,UAAU,IAAI,QAAQ,QAAQ,KAAA,CAAS,IAAI,KAAK,UAAU,YAAY,WAAW,UAAU,CAAC;EACxG,oBAAoB,KAAK,sBACrB,eACE,UAAU,UAAU,IAChB,QAAQ,QAAQ,KAAA,CAAS,IACzB,KAAK,mBAAoB,YAAY,WAAW,UAAU,CAAC,IACjE,KAAA;EACJ,cAAc,KAAK,gBAAe,eAAc,KAAK,aAAc,UAAU,IAAI,KAAA;EACjF,kBAAkB,KAAK,oBAAmB,eAAc,KAAK,iBAAkB,UAAU,IAAI,KAAA;EAC7F,iBAAiB,KAAK,mBACjB,YAAY,sBAAsB,KAAK,gBAAiB,YAAY,iBAAiB,IACtF,KAAA;EACJ,eAAe,KAAK,iBACf,YAAY,sBAAsB,KAAK,cAAe,YAAY,iBAAiB,IACpF,KAAA;CACN;AACF;AAEA,SAAgB,wBAAwB,SAAsD;CAC5F,OAAO,IAAI,kBAAkB,OAAO;AACtC;AAEA,SAAgB,qCAAqC,SAAsC;CACzF,OAAO,mBAAmB,oBACtB,QAAQ,2BAA2B,IACnC,kBAAkB,2BAA2B,OAAO;AAC1D;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,aACd,SACA,SAMsB;CACtB,kBAAkB;CAClB,MAAM,UAAU,0BAA0B,SAAS,cAAc;CACjE,MAAM,WAAW,aAAa;CAK9B,MAAM,sBAAsB,GAAG,sBAAsB;CACrD,MAAM,yBAAyB,QAAQ,WAAW,mBAAmB,IACjE,QAAQ,MAAM,sBAAsB,SAAS,CAAC,IAC9C;CAIJ,MAAM,kBAAkB,uBAAuB,SAAS,cAAc,KAAK,SAAS;CAOpF,MAAM,kBAAkB,oCAAoC,wBAAwB,eAAe;CACnG,MAAM,uBAAuB,gBAAgB,WAAW,qBAAqB;CAC7E,MAAM,oBAAoB,yBAAyB,eAAe;CAClE,MAAM,CAAC,YAAY,GAAG,cAAc,kBAAkB,MAAM,GAAG;CAC/D,MAAM,cAAc,WAAW,KAAK,GAAG;CACvC,IAAI,CAAC,cAAc,CAAC,aAClB,MAAM,IAAI,MAAM,qBAAqB,SAAS;CAMhD,MAAM,wBAAwB,uBAAuB,SAAS,cAAc;CAC5E,MAAM,sBAAsB,yBAAyB,qBAAqB;CAE1E,IAAI,eAAA,kBAA0C;EAI5C,IACE,uBAAuB,6BAA6B,SACpD,CAAC,sBAAsB,8BAAA,gBAAuD,GAE9E,MAAM,IAAI,0BACR,+KACF;EAEF,MAAM,iBAAiB,2BAA2B;EAClD,MAAM,WAAW,GAAG,0BAA0B,GAAG;EACjD,MAAM,OAAO,eAAe,YAAY;GACtC,WAAW;GACX,YAAY;GACZ,SAAS;GACT;EACF,CAAC;EACD,OAAO,eAAe,qBAAqB;GACzC,YAAY;GACZ,SAAS;GACT,QAAQ,MAAM,UAAU;GACxB;EACF,CAAC;CACH;CAEA,MAAM,WAAW,GAAG,sBAAsB,GAAG;CAE7C,MAAM,WAAW,kBAAkB,uBAAuB;CAC1D,MAAM,iBACJ,SAAS,eAAe,WAAW,QAAQ,IAAI,yBAAyB;CAC1E,MAAM,kBAAkB,mCAAmC,qBAAqB,SAAS,cAAc;CACvG,MAAM,UAAU,wBAAwB;EACtC,sBAAsB,eAAe,QAAQ,QAAQ,EAAE,CAAC,CAAC,QAAQ,SAAS,EAAE;EAC5E,qBAAqB;EACrB,2BAA2B,QAAQ,YAAY,oBAAoB;EACnE,eAAe,SAAS;EACxB,2BAA2B,SAAS;EACpC;EACA;CACF,CAAC;CAED,MAAM,OAAO,QAAQ,YAAY;EAC/B,WAAW;EACX;EACA,SAAS;EACT;CACF,CAAC;CAED,IAAI,CAAC,QAAQ,iBAAiB,6BAA6B,OACzD,MAAM,IAAI,0BACR,aAAa,WAAW,sIAC1B;CAGF,OAAO,QAAQ,qBAAqB;EAClC;EACA,SAAS;EACT,QAAQ,MAAM,UAAU;EACxB;CACF,CAAC;AACH;;;;;;;;;;;;;;AAoBA,SAAgB,4BACd,wBACA,cACsB;CACtB,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,uBAAuB,QAAQ,GAAG,OAAO;CAC7C,MAAM,SAAS,wBAAwB,SAAS;CAChD,OAAO,4BAA4B,aAAa,YAAY,GAAG,MAAM,CAAC,CAAC;AACzE;;;;;;;AAQA,SAAgB,gBACd,EAAE,kBACF,cACoC;CACpC,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,MAAM,QAAQ,YAAY,WAAW;CAQrC,MAAM,eAAe,OAAO;CAC5B,MAAM,kBACJ,iBACC,aAAa,aAAa,KAAA,KACxB,OAAO,aAAa,aAAa,YAAY,aAAa,aAAa,YAAY,YAClF,eACA,KAAA;CAKN,MAAM,WAHJ,mBAAmB,OAAO,gBAAgB,cAAc,YAAY,gBAAgB,UAAU,SAAS,IACnG,gBAAgB,YAChB,KAAA,MAC4B,YAAY,SAAS;CACvD,IAAI,CAAC,SAAS;EACZ,IAAI,CAAC,YACH,MAAM,IAAI,MACR,qHACF;EAEF,MAAM,IAAI,MAAM,yDAAyD;CAC3E;CAGA,MAAM,iBAAiB;EAAE,eADH,4BAA4B,YAAY,YACzB;EAAG,oBAAoB;EAAM;CAAe;CACjF,MAAM,UAAU,aAAa,SAAS,cAAc;CACpD,MAAM,QAAQ,OAAO,YAAY,SAAS,MAAM,GAAA,EAA0B;CAC1E,MAAM,iBACJ,mBAAmB,OAAO,gBAAgB,cAAc,WAAW,gBAAgB,YAAY,KAAA;CACjG,MAAM,aAAa,iBAAiB,OAAO,WAAU,UAAS,MAAM,OAAO,cAAc,IAAI;CAC7F,MAAM,cAAc,SAAS,eAAe,KAAA,KAAa,cAAc,IAAI,MAAM,MAAM,UAAU,IAAI,KAAA;CACrG,IAAI,CAAC,eAAe,YAAY,SAAS,KAAK,YAAY,EAAE,EAAE,YAAY,SAAS,OAAO;CAE1F,MAAM,UACJ,OAAO,YAAY,EAAE,EAAE,OAAO,YAAY,YAAY,EAAE,CAAC,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC,KAAK,KAAA;CAC/F,IAAI,CAAC,SAAS,OAAO;CAErB,MAAM,UAA8B,CAAC;EAAE,IAAI;EAAS,OAAO;CAAQ,CAAC;CACpE,MAAM,8BAAc,IAAI,IAAoB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;CAC1D,KAAK,MAAM,cAAc,YAAY,MAAM,CAAC,GAAG;EAC7C,IACE,OAAO,WAAW,OAAO,YACzB,WAAW,GAAG,WAAW,KACzB,OAAO,WAAW,YAAY,YAC9B,WAAW,QAAQ,WAAW,GAE9B;EAEF,IAAI;EACJ,IAAI;GACF,aAAa,aAAa,WAAW,SAAS,cAAc;EAC9D,QAAQ;GACN;EACF;EACA,MAAM,cAAc,YAAY,IAAI,WAAW,EAAE,KAAK,KAAK;EAC3D,YAAY,IAAI,WAAW,IAAI,UAAU;EACzC,QAAQ,KAAK;GACX,IAAI,eAAe,IAAI,WAAW,KAAK,GAAG,WAAW,GAAG,GAAG;GAC3D,OAAO;EACT,CAAC;CACH;CAEA,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;;;;;;;;;;;;;;;AAgBA,SAAgB,kBACd,EAAE,kBACF,cAC2B;CAC3B,MAAM,eAAe,aAAa,YAAY,CAAC,CAAC,OAAO;CACvD,IAAI,CAAC,cAAc,OAAO,KAAA;CAC1B,OAAO,aAAa,cAAc;EAAE,oBAAoB;EAAM;CAAe,CAAC;AAChF"}

package/dist/auth/account-rotation-processor.d.ts

@@ -12,7 +12,7 @@ export interface AccountSwitchPartData {
         id: string;
         label: string;
     } | null;
-    reason: 'rate-limit' | 'quota-exhausted' | 'auth-failed' | 'pool-exhausted' | 'persistent-outage' | 'preferred-routing' | 'starting-on-account';
+    reason: 'rate-limit' | 'quota-exhausted' | 'auth-failed' | 'pool-exhausted' | 'persistent-outage' | 'preferred-routing';
     at: string;
     /**
      * Set on a `to: null` part when a route pinned to a single account reported
@@ -160,8 +160,9 @@ export declare class AccountRotationProcessor implements Processor {
     private declarePoolUnavailable;
 }
 /**
- * Emits the "starting on a non-default account" notice (Q19) once per
- * request when the active registry account is not the first entry.
+ * Applies the pack's preferred account route once per request, before the
+ * first model call. Without a route it only reloads the credential store so
+ * the request sees accounts changed by other processes.
  *
  * TYPE CONSTRAINT: this class must NEVER implement `processAPIError`. It
  * lives in `inputProcessors`; the runner walks input processors first when

package/dist/auth/account-rotation-processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-rotation-processor.d.ts","sourceRoot":"","sources":["../../src/auth/account-rotation-processor.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAYpH,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,YAAY,CAAC;AAEtE,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3C,EAAE,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzC,MAAM,EACF,YAAY,GACZ,iBAAiB,GACjB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,iFAAiF;AACjF,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG;IACtD;;;;;;OAMG;IACH,yBAAyB,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACzG,CAAC;AA0CF,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,EAAG,gCAAyC,CAAC;AAElF,2DAA2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,EAAE,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,EAAG,gCAAyC,CAAC;AAElF,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,iBAAiB,GAAG,aAAa,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AA0EtB;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAyB5E;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvE;AASD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAqCpE;AAkBD,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMzD,CAAC;AAWF,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAO9F;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAiB3E;AAED,yGAAyG;AACzG,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAG3E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAE9F;AA0DD,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;CAChC,CAAC;AAkIF,qBAAa,wBAAyB,YAAW,SAAS;IAItD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,QAAQ,CAAC,EAAE,EAAG,6BAA6B,CAAU;gBAGlC,OAAO,EAAE;QACxB,eAAe,EAAE,uBAAuB,CAAC;QACzC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB;IAGG,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAsI7E;;;;OAIG;YACW,oBAAoB;IAuElC;;;;;;;;;OASG;YACW,YAAY;IAQ1B,0EAA0E;YAC5D,qBAAqB;IAqDnC;;;;;;OAMG;YACW,sBAAsB;CAiCrC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,YAAW,SAAS;IAG/C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,EAAE,EAAG,iCAAiC,CAAU;gBAE5B,OAAO,EAAE;QAAE,eAAe,EAAE,eAAe,CAAA;KAAE;IAEpE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAgDxE"}
+{"version":3,"file":"account-rotation-processor.d.ts","sourceRoot":"","sources":["../../src/auth/account-rotation-processor.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAYpH,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,YAAY,CAAC;AAEtE,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3C,EAAE,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzC,MAAM,EACF,YAAY,GACZ,iBAAiB,GACjB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,iFAAiF;AACjF,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG;IACtD;;;;;;OAMG;IACH,yBAAyB,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACzG,CAAC;AA0CF,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,EAAG,gCAAyC,CAAC;AAElF,2DAA2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,EAAE,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,EAAG,gCAAyC,CAAC;AAElF,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,iBAAiB,GAAG,aAAa,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AA0EtB;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAyB5E;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvE;AASD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAqCpE;AAkBD,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMzD,CAAC;AAWF,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAI9F;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAc3E;AAED,yGAAyG;AACzG,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAG3E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAE9F;AA0DD,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;CAChC,CAAC;AAkIF,qBAAa,wBAAyB,YAAW,SAAS;IAItD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,QAAQ,CAAC,EAAE,EAAG,6BAA6B,CAAU;gBAGlC,OAAO,EAAE;QACxB,eAAe,EAAE,uBAAuB,CAAC;QACzC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB;IAGG,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAsI7E;;;;OAIG;YACW,oBAAoB;IAuElC;;;;;;;;;OASG;YACW,YAAY;IAQ1B,0EAA0E;YAC5D,qBAAqB;IAqDnC;;;;;;OAMG;YACW,sBAAsB;CAiCrC;AAED;;;;;;;;;GASG;AACH,qBAAa,2BAA4B,YAAW,SAAS;IAG/C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,EAAE,EAAG,iCAAiC,CAAU;gBAE5B,OAAO,EAAE;QAAE,eAAe,EAAE,eAAe,CAAA;KAAE;IAEpE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CA2BxE"}

package/dist/auth/account-rotation-processor.js

@@ -222,7 +222,7 @@ const REASON_TEXT = {
 };
 /** Validates untrusted `reason` values (e.g. persisted message parts). */
 function isAccountSwitchReason(value) {
-	return value === "starting-on-account" || typeof value === "string" && Object.prototype.hasOwnProperty.call(REASON_TEXT, value);
+	return typeof value === "string" && Object.prototype.hasOwnProperty.call(REASON_TEXT, value);
 }
 /**
 * One-line transcript copy for a switch part. Shared by the live `info`
@@ -232,8 +232,7 @@ function isAccountSwitchReason(value) {
 */
 function accountSwitchNoticeText(data) {
 	const provider = PROVIDER_DISPLAY_NAMES[data.provider] ?? data.provider;
-	if (data.reason === "starting-on-account" && data.to) return `Starting on ${provider} account: ${data.to.label}`;
-	const reason = data.reason === "starting-on-account" ? data.reason : REASON_TEXT[data.reason];
+	const reason = REASON_TEXT[data.reason];
 	if (data.to === null) {
 		if (data.exclusive) return `Pinned ${provider} account unavailable (${reason})`;
 		return `All ${provider} accounts unavailable (${reason})`;
@@ -576,8 +575,9 @@ var AccountRotationProcessor = class {
 	}
 };
 /**
-* Emits the "starting on a non-default account" notice (Q19) once per
-* request when the active registry account is not the first entry.
+* Applies the pack's preferred account route once per request, before the
+* first model call. Without a route it only reloads the credential store so
+* the request sees accounts changed by other processes.
 *
 * TYPE CONSTRAINT: this class must NEVER implement `processAPIError`. It
 * lives in `inputProcessors`; the runner walks input processors first when
@@ -594,30 +594,11 @@ var AccountStartNoticeProcessor = class {
 		if (args.state.startNoticeEmitted) return args.messageList;
 		const store = resolveCredentialStore(args.requestContext) ?? this.options.credentialStore;
 		const route = resolveAccountRoute(args);
-		if (route) {
-			if (await applyPreferredAccountRoute(args, store, route) || getRouteTargetAccountId(route) !== void 0) {
-				args.state.startNoticeEmitted = true;
-				return args.messageList;
-			}
-		} else store.reload();
-		const providerId = route?.providerId ?? providerFromSession(args);
-		if (!providerId) return args.messageList;
-		const accounts = store.listAccounts?.(providerId) ?? [];
-		if (accounts.length < 2) return args.messageList;
-		const active = store.getActiveAccount?.(providerId);
-		const first = accounts[0];
-		if (!active || !first || active.id === first.id) return args.messageList;
-		args.state.startNoticeEmitted = true;
-		await emitAccountSwitchPart(args, {
-			provider: providerId,
-			from: null,
-			to: {
-				id: active.id,
-				label: active.label
-			},
-			reason: "starting-on-account",
-			at: (/* @__PURE__ */ new Date()).toISOString()
-		});
+		if (!route) {
+			store.reload();
+			return args.messageList;
+		}
+		if (await applyPreferredAccountRoute(args, store, route) || getRouteTargetAccountId(route) !== void 0) args.state.startNoticeEmitted = true;
 		return args.messageList;
 	}
 };