@mastra/code-sdk 1.15.1-alpha.3 → 1.15.1-alpha.5

package/dist/providers/claude-max.js

@@ -5,13 +5,14 @@ import { ProviderAuthRequiredError, rejectUnauthorizedResponse } from "../auth/p
 import "./anthropic-prompt-cache.js";
 import { wrapLanguageModel } from "ai";
 import { createAnthropic } from "@ai-sdk/anthropic";
-//#region src/providers/claude-max.ts
+// src/providers/claude-max.ts
 /**
 * Claude Max OAuth Provider
 *
 * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.
 * The OAuth endpoint requires a specific system message to be present.
 */
+const PROVIDER_NAME = "Anthropic";
 const claudeCodeIdentity = "You are Claude Code, Anthropic's official CLI for Claude.";
 const OAUTH_REQUIRED_BETAS = [
 	"oauth-2025-04-20",
@@ -172,7 +173,7 @@ function buildAnthropicOAuthFetch(opts = {}) {
 		storage.reload();
 		if (storage.get("anthropic")?.type === "api_key") throw new Error("Anthropic API key credential is configured, but OAuth is required.");
 		const accessToken = await storage.getApiKey("anthropic");
-		if (!accessToken) throw new ProviderAuthRequiredError("Not logged in to Anthropic.");
+		if (!accessToken) throw storage.get("anthropic")?.type === "oauth" ? ProviderAuthRequiredError.signInExpired(PROVIDER_NAME) : ProviderAuthRequiredError.notSignedIn(PROVIDER_NAME);
 		const headers = new Headers(url instanceof Request ? url.headers : void 0);
 		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
 		headers.delete("authorization");
@@ -187,7 +188,7 @@ function buildAnthropicOAuthFetch(opts = {}) {
 				...init,
 				headers
 			}), {
-				providerName: "Anthropic",
+				providerName: PROVIDER_NAME,
 				requestUrl
 			});
 		} catch (error) {
@@ -228,7 +229,6 @@ function opencodeClaudeMaxProvider(modelId = "claude-sonnet-5-5", options) {
 		middleware
 	});
 }
-//#endregion
 export { buildAnthropicOAuthFetch, claudeCodeMiddleware, createAnthropicThinkingMiddleware, createPromptCacheMiddleware, getAuthStorage, opencodeClaudeMaxProvider, setAuthStorage };
 
 //# sourceMappingURL=claude-max.js.map

package/dist/providers/claude-max.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-max.js","names":[],"sources":["../../src/providers/claude-max.ts"],"sourcesContent":["/**\n * Claude Max OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.\n * The OAuth endpoint requires a specific system message to be present.\n */\n\nimport { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { ProviderAuthRequiredError, rejectUnauthorizedResponse } from '../auth/provider-auth-error.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { runCatalogThinkingLevel } from '../thinking-catalog.js';\nimport { ANTHROPIC_PROMPT_CACHE_TTL } from './anthropic-prompt-cache.js';\nimport type { AnthropicPromptCacheScope } from './anthropic-prompt-cache.js';\nimport { ANTHROPIC_THINKING_BUDGET_TOKENS, getAnthropicThinkingCapability } from './anthropic-thinking.js';\nimport type { ThinkingLevel } from './openai-codex.js';\n\n// Required for Claude Max plan OAuth - the endpoint checks for this system message\nconst claudeCodeIdentity = \"You are Claude Code, Anthropic's official CLI for Claude.\";\n\n// Betas required for Claude Max plan OAuth. Merged with (not replacing) any\n// betas the AI SDK already set on the request — e.g. the SDK adds\n// `server-side-fallback-2026-06-01` when `providerOptions.anthropic.fallbacks`\n// is configured; dropping it makes the API reject the `fallbacks` body field\n// with \"Extra inputs are not permitted\".\nconst OAUTH_REQUIRED_BETAS = [\n  'oauth-2025-04-20',\n  'claude-code-20250219',\n  'interleaved-thinking-2025-05-14',\n  'fine-grained-tool-streaming-2025-05-14',\n];\n\n// Singleton auth storage instance\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Middleware that injects the Claude Code identity system message\n * Required for Claude Max OAuth authentication\n */\nexport const claudeCodeMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    // Prepend the Claude Code identity as the first system message\n    const systemMessage = {\n      role: 'system' as const,\n      content: claudeCodeIdentity,\n    };\n\n    if (params.temperature) {\n      delete params.topP;\n    }\n\n    return {\n      ...params,\n      prompt: [systemMessage, ...params.prompt],\n    };\n  },\n};\n\n/**\n * Prompt caching middleware for Anthropic\n *\n * Adds cache breakpoints at strategic locations:\n * 1. Last system message (end of static instructions + dynamic memory)\n * 2. Most recent user/assistant message (conversation context), `conversation` scope only\n *\n * This allows Anthropic to cache:\n * - System prompts and instructions (rarely change)\n * - Conversation history up to the last message\n */\nexport const createPromptCacheMiddleware = (scope: AnthropicPromptCacheScope): LanguageModelMiddleware => ({\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    const prompt = [...params.prompt];\n\n    const cacheControl = {\n      type: 'ephemeral' as const,\n      ttl: scope === 'conversation' ? ANTHROPIC_PROMPT_CACHE_TTL : ('5m' as const),\n    };\n\n    // Helper to add cache control to a message's last content part\n    const addCacheToMessage = (msg: any) => {\n      // For system messages with string content\n      if (typeof msg.content === 'string') {\n        return {\n          ...msg,\n          providerOptions: {\n            ...msg.providerOptions,\n            anthropic: { ...msg.providerOptions?.anthropic, cacheControl },\n          },\n        };\n      }\n\n      // For messages with array content, add to last part\n      if (Array.isArray(msg.content) && msg.content.length > 0) {\n        const content = [...msg.content];\n        const lastPart = content[content.length - 1];\n        content[content.length - 1] = {\n          ...lastPart,\n          providerOptions: {\n            ...lastPart.providerOptions,\n            anthropic: { ...lastPart.providerOptions?.anthropic, cacheControl },\n          },\n        };\n        return { ...msg, content };\n      }\n\n      return msg;\n    };\n\n    // Find the last system message index\n    let lastSystemIdx = -1;\n    for (let i = prompt.length - 1; i >= 0; i--) {\n      if ((prompt[i] as any).role === 'system') {\n        lastSystemIdx = i;\n        break;\n      }\n    }\n\n    // Add cache breakpoint to last system message\n    if (lastSystemIdx >= 0) {\n      prompt[lastSystemIdx] = addCacheToMessage(prompt[lastSystemIdx]);\n    }\n\n    // Add cache breakpoint to the most recent message (last in array)\n    const lastIdx = prompt.length - 1;\n    if (scope === 'conversation' && lastIdx >= 0 && lastIdx !== lastSystemIdx) {\n      prompt[lastIdx] = addCacheToMessage(prompt[lastIdx]);\n    }\n\n    return { ...params, prompt };\n  },\n});\n\nfunction runAnthropicRequestLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  return runCatalogThinkingLevel(`anthropic/${modelId}`, level);\n}\n\n/**\n * Middleware that maps the session thinking level onto Anthropic extended\n * thinking. Returns `undefined` (no middleware) when the level is `off` or the\n * model doesn't support thinking, preserving the previous request shape.\n *\n * - Adaptive-era models (Sonnet 4.6+/Opus 4.6+): `thinking: adaptive` plus\n *   `output_config.effort`, the closest effort the model accepts.\n * - Budget-era models (Claude 3.7 – Opus 4.5): `thinking: enabled` with a\n *   `budget_tokens` value derived from the level.\n */\nexport function createAnthropicThinkingMiddleware(\n  modelId: string,\n  thinkingLevel?: ThinkingLevel,\n): LanguageModelMiddleware | undefined {\n  if (!thinkingLevel || thinkingLevel === 'off') return undefined;\n  const capability = getAnthropicThinkingCapability(modelId);\n  const level = runAnthropicRequestLevel(modelId, thinkingLevel);\n  if (level === 'off') return undefined;\n\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      const anthropicOptions = (params.providerOptions?.anthropic ?? {}) as Record<string, unknown>;\n      // Don't override explicit per-request thinking configuration.\n      if (anthropicOptions.thinking !== undefined || anthropicOptions.effort !== undefined) {\n        return params;\n      }\n\n      // Anthropic rejects sampling parameters when thinking is enabled.\n      delete params.temperature;\n      delete params.topP;\n      delete params.topK;\n\n      params.providerOptions = {\n        ...params.providerOptions,\n        anthropic: {\n          ...anthropicOptions,\n          ...(capability === 'adaptive'\n            ? { thinking: { type: 'adaptive', display: 'summarized' }, effort: level }\n            : { thinking: { type: 'enabled', budgetTokens: ANTHROPIC_THINKING_BUDGET_TOKENS[level] } }),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Build a fetch function that handles Anthropic OAuth.\n * Preserves non-auth headers from init (critical for gateway auth header to survive\n * when used with the gateway). Strips `authorization` and `x-api-key`.\n */\nexport function buildAnthropicOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const storedCred = storage.get('anthropic');\n    if (storedCred?.type === 'api_key') {\n      throw new Error('Anthropic API key credential is configured, but OAuth is required.');\n    }\n\n    const accessToken = await storage.getApiKey('anthropic');\n    if (!accessToken) {\n      throw new ProviderAuthRequiredError('Not logged in to Anthropic.');\n    }\n\n    // Preserve Request headers and let explicit init headers override them.\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    const requestBetas = (headers.get('anthropic-beta') ?? '')\n      .split(',')\n      .map(beta => beta.trim())\n      .filter(Boolean);\n    headers.set('anthropic-beta', Array.from(new Set([...OAUTH_REQUIRED_BETAS, ...requestBetas])).join(','));\n    headers.set('anthropic-version', '2023-06-01');\n\n    const requestUrl = url instanceof URL ? url.toString() : typeof url === 'string' ? url : url.url;\n    try {\n      return await rejectUnauthorizedResponse(await fetch(url, { ...init, headers }), {\n        providerName: 'Anthropic',\n        requestUrl,\n      });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, { requestUrl });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an Anthropic model using Claude Max OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n */\nexport function opencodeClaudeMaxProvider(\n  modelId: string = 'claude-sonnet-5-5',\n  options?: {\n    headers?: Record<string, string>;\n    authStorage?: CredentialStore;\n    thinkingLevel?: ThinkingLevel;\n    promptCacheScope?: AnthropicPromptCacheScope;\n  },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, options?.thinkingLevel);\n  const middleware = [\n    claudeCodeMiddleware,\n    createPromptCacheMiddleware(options?.promptCacheScope ?? 'conversation'),\n    ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n  ];\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const anthropic = createAnthropic({\n      apiKey: 'test-api-key',\n      headers,\n    });\n    return wrapLanguageModel({\n      model: anthropic(modelId),\n      middleware,\n    });\n  }\n\n  const anthropic = createAnthropic({\n    apiKey: 'oauth-placeholder',\n    headers,\n    fetch: buildAnthropicOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Wrap with middleware to inject Claude Code identity and enable prompt caching\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,MAAM,qBAAqB;AAO3B,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;AACF;AAGA,IAAI,sBAA0C;;;;AAK9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;AAMA,MAAa,uBAAgD;CAC3D,sBAAsB;CACtB,iBAAiB,OAAO,EAAE,aAAa;EAErC,MAAM,gBAAgB;GACpB,MAAM;GACN,SAAS;EACX;EAEA,IAAI,OAAO,aACT,OAAO,OAAO;EAGhB,OAAO;GACL,GAAG;GACH,QAAQ,CAAC,eAAe,GAAG,OAAO,MAAM;EAC1C;CACF;AACF;;;;;;;;;;;;AAaA,MAAa,+BAA+B,WAA+D;CACzG,sBAAsB;CACtB,iBAAiB,OAAO,EAAE,aAAa;EACrC,MAAM,SAAS,CAAC,GAAG,OAAO,MAAM;EAEhC,MAAM,eAAe;GACnB,MAAM;GACN,KAAK,UAAU,iBAAA,OAA+C;EAChE;EAGA,MAAM,qBAAqB,QAAa;GAEtC,IAAI,OAAO,IAAI,YAAY,UACzB,OAAO;IACL,GAAG;IACH,iBAAiB;KACf,GAAG,IAAI;KACP,WAAW;MAAE,GAAG,IAAI,iBAAiB;MAAW;KAAa;IAC/D;GACF;GAIF,IAAI,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,SAAS,GAAG;IACxD,MAAM,UAAU,CAAC,GAAG,IAAI,OAAO;IAC/B,MAAM,WAAW,QAAQ,QAAQ,SAAS;IAC1C,QAAQ,QAAQ,SAAS,KAAK;KAC5B,GAAG;KACH,iBAAiB;MACf,GAAG,SAAS;MACZ,WAAW;OAAE,GAAG,SAAS,iBAAiB;OAAW;MAAa;KACpE;IACF;IACA,OAAO;KAAE,GAAG;KAAK;IAAQ;GAC3B;GAEA,OAAO;EACT;EAGA,IAAI,gBAAgB;EACpB,KAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KACtC,IAAK,OAAO,EAAE,CAAS,SAAS,UAAU;GACxC,gBAAgB;GAChB;EACF;EAIF,IAAI,iBAAiB,GACnB,OAAO,iBAAiB,kBAAkB,OAAO,cAAc;EAIjE,MAAM,UAAU,OAAO,SAAS;EAChC,IAAI,UAAU,kBAAkB,WAAW,KAAK,YAAY,eAC1D,OAAO,WAAW,kBAAkB,OAAO,QAAQ;EAGrD,OAAO;GAAE,GAAG;GAAQ;EAAO;CAC7B;AACF;AAEA,SAAS,yBAAyB,SAAiB,OAAqC;CACtF,OAAO,wBAAwB,aAAa,WAAW,KAAK;AAC9D;;;;;;;;;;;AAYA,SAAgB,kCACd,SACA,eACqC;CACrC,IAAI,CAAC,iBAAiB,kBAAkB,OAAO,OAAO,KAAA;CACtD,MAAM,aAAa,+BAA+B,OAAO;CACzD,MAAM,QAAQ,yBAAyB,SAAS,aAAa;CAC7D,IAAI,UAAU,OAAO,OAAO,KAAA;CAE5B,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GACrC,MAAM,mBAAoB,OAAO,iBAAiB,aAAa,CAAC;GAEhE,IAAI,iBAAiB,aAAa,KAAA,KAAa,iBAAiB,WAAW,KAAA,GACzE,OAAO;GAIT,OAAO,OAAO;GACd,OAAO,OAAO;GACd,OAAO,OAAO;GAEd,OAAO,kBAAkB;IACvB,GAAG,OAAO;IACV,WAAW;KACT,GAAG;KACH,GAAI,eAAe,aACf;MAAE,UAAU;OAAE,MAAM;OAAY,SAAS;MAAa;MAAG,QAAQ;KAAM,IACvE,EAAE,UAAU;MAAE,MAAM;MAAW,cAAc,iCAAiC;KAAO,EAAE;IAC7F;GACF;GAEA,OAAO;EACT;CACF;AACF;;;;;;AAOA,SAAgB,yBAAyB,OAA0C,CAAC,GAAiB;CACnG,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAGf,IADmB,QAAQ,IAAI,WAClB,CAAC,EAAE,SAAS,WACvB,MAAM,IAAI,MAAM,oEAAoE;EAGtF,MAAM,cAAc,MAAM,QAAQ,UAAU,WAAW;EACvD,IAAI,CAAC,aACH,MAAM,IAAI,0BAA0B,6BAA6B;EAInE,MAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,KAAA,CAAS;EAC5E,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,MAAM,gBAAgB,QAAQ,IAAI,gBAAgB,KAAK,GAAA,CACpD,MAAM,GAAG,CAAC,CACV,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,OAAO,OAAO;EACjB,QAAQ,IAAI,kBAAkB,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAG,sBAAsB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;EACvG,QAAQ,IAAI,qBAAqB,YAAY;EAE7C,MAAM,aAAa,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAM,IAAI;EAC7F,IAAI;GACF,OAAO,MAAM,2BAA2B,MAAM,MAAM,KAAK;IAAE,GAAG;IAAM;GAAQ,CAAC,GAAG;IAC9E,cAAc;IACd;GACF,CAAC;EACH,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAAE,WAAW,CAAC;GAEhE,MAAM;EACR;CACF;AACF;;;;;AAMA,SAAgB,0BACd,UAAkB,qBAClB,SAMmB;CACnB,MAAM,UAAU,SAAS;CACzB,MAAM,qBAAqB,kCAAkC,SAAS,SAAS,aAAa;CAC5F,MAAM,aAAa;EACjB;EACA,4BAA4B,SAAS,oBAAoB,cAAc;EACvE,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;CACnD;CAGA,IAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;EACzD,MAAM,YAAY,gBAAgB;GAChC,QAAQ;GACR;EACF,CAAC;EACD,OAAO,kBAAkB;GACvB,OAAO,UAAU,OAAO;GACxB;EACF,CAAC;CACH;CAEA,MAAM,YAAY,gBAAgB;EAChC,QAAQ;EACR;EACA,OAAO,yBAAyB,EAAE,aAAa,SAAS,YAAY,CAAC;CACvE,CAAC;CAGD,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB;CACF,CAAC;AACH"}
+{"version":3,"file":"claude-max.js","names":[],"sources":["../../src/providers/claude-max.ts"],"sourcesContent":["/**\n * Claude Max OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.\n * The OAuth endpoint requires a specific system message to be present.\n */\n\nimport { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { ProviderAuthRequiredError, rejectUnauthorizedResponse } from '../auth/provider-auth-error.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { runCatalogThinkingLevel } from '../thinking-catalog.js';\nimport { ANTHROPIC_PROMPT_CACHE_TTL } from './anthropic-prompt-cache.js';\nimport type { AnthropicPromptCacheScope } from './anthropic-prompt-cache.js';\nimport { ANTHROPIC_THINKING_BUDGET_TOKENS, getAnthropicThinkingCapability } from './anthropic-thinking.js';\nimport type { ThinkingLevel } from './openai-codex.js';\n\nconst PROVIDER_NAME = 'Anthropic';\n\n// Required for Claude Max plan OAuth - the endpoint checks for this system message\nconst claudeCodeIdentity = \"You are Claude Code, Anthropic's official CLI for Claude.\";\n\n// Betas required for Claude Max plan OAuth. Merged with (not replacing) any\n// betas the AI SDK already set on the request — e.g. the SDK adds\n// `server-side-fallback-2026-06-01` when `providerOptions.anthropic.fallbacks`\n// is configured; dropping it makes the API reject the `fallbacks` body field\n// with \"Extra inputs are not permitted\".\nconst OAUTH_REQUIRED_BETAS = [\n  'oauth-2025-04-20',\n  'claude-code-20250219',\n  'interleaved-thinking-2025-05-14',\n  'fine-grained-tool-streaming-2025-05-14',\n];\n\n// Singleton auth storage instance\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Middleware that injects the Claude Code identity system message\n * Required for Claude Max OAuth authentication\n */\nexport const claudeCodeMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    // Prepend the Claude Code identity as the first system message\n    const systemMessage = {\n      role: 'system' as const,\n      content: claudeCodeIdentity,\n    };\n\n    if (params.temperature) {\n      delete params.topP;\n    }\n\n    return {\n      ...params,\n      prompt: [systemMessage, ...params.prompt],\n    };\n  },\n};\n\n/**\n * Prompt caching middleware for Anthropic\n *\n * Adds cache breakpoints at strategic locations:\n * 1. Last system message (end of static instructions + dynamic memory)\n * 2. Most recent user/assistant message (conversation context), `conversation` scope only\n *\n * This allows Anthropic to cache:\n * - System prompts and instructions (rarely change)\n * - Conversation history up to the last message\n */\nexport const createPromptCacheMiddleware = (scope: AnthropicPromptCacheScope): LanguageModelMiddleware => ({\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    const prompt = [...params.prompt];\n\n    const cacheControl = {\n      type: 'ephemeral' as const,\n      ttl: scope === 'conversation' ? ANTHROPIC_PROMPT_CACHE_TTL : ('5m' as const),\n    };\n\n    // Helper to add cache control to a message's last content part\n    const addCacheToMessage = (msg: any) => {\n      // For system messages with string content\n      if (typeof msg.content === 'string') {\n        return {\n          ...msg,\n          providerOptions: {\n            ...msg.providerOptions,\n            anthropic: { ...msg.providerOptions?.anthropic, cacheControl },\n          },\n        };\n      }\n\n      // For messages with array content, add to last part\n      if (Array.isArray(msg.content) && msg.content.length > 0) {\n        const content = [...msg.content];\n        const lastPart = content[content.length - 1];\n        content[content.length - 1] = {\n          ...lastPart,\n          providerOptions: {\n            ...lastPart.providerOptions,\n            anthropic: { ...lastPart.providerOptions?.anthropic, cacheControl },\n          },\n        };\n        return { ...msg, content };\n      }\n\n      return msg;\n    };\n\n    // Find the last system message index\n    let lastSystemIdx = -1;\n    for (let i = prompt.length - 1; i >= 0; i--) {\n      if ((prompt[i] as any).role === 'system') {\n        lastSystemIdx = i;\n        break;\n      }\n    }\n\n    // Add cache breakpoint to last system message\n    if (lastSystemIdx >= 0) {\n      prompt[lastSystemIdx] = addCacheToMessage(prompt[lastSystemIdx]);\n    }\n\n    // Add cache breakpoint to the most recent message (last in array)\n    const lastIdx = prompt.length - 1;\n    if (scope === 'conversation' && lastIdx >= 0 && lastIdx !== lastSystemIdx) {\n      prompt[lastIdx] = addCacheToMessage(prompt[lastIdx]);\n    }\n\n    return { ...params, prompt };\n  },\n});\n\nfunction runAnthropicRequestLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  return runCatalogThinkingLevel(`anthropic/${modelId}`, level);\n}\n\n/**\n * Middleware that maps the session thinking level onto Anthropic extended\n * thinking. Returns `undefined` (no middleware) when the level is `off` or the\n * model doesn't support thinking, preserving the previous request shape.\n *\n * - Adaptive-era models (Sonnet 4.6+/Opus 4.6+): `thinking: adaptive` plus\n *   `output_config.effort`, the closest effort the model accepts.\n * - Budget-era models (Claude 3.7 – Opus 4.5): `thinking: enabled` with a\n *   `budget_tokens` value derived from the level.\n */\nexport function createAnthropicThinkingMiddleware(\n  modelId: string,\n  thinkingLevel?: ThinkingLevel,\n): LanguageModelMiddleware | undefined {\n  if (!thinkingLevel || thinkingLevel === 'off') return undefined;\n  const capability = getAnthropicThinkingCapability(modelId);\n  const level = runAnthropicRequestLevel(modelId, thinkingLevel);\n  if (level === 'off') return undefined;\n\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      const anthropicOptions = (params.providerOptions?.anthropic ?? {}) as Record<string, unknown>;\n      // Don't override explicit per-request thinking configuration.\n      if (anthropicOptions.thinking !== undefined || anthropicOptions.effort !== undefined) {\n        return params;\n      }\n\n      // Anthropic rejects sampling parameters when thinking is enabled.\n      delete params.temperature;\n      delete params.topP;\n      delete params.topK;\n\n      params.providerOptions = {\n        ...params.providerOptions,\n        anthropic: {\n          ...anthropicOptions,\n          ...(capability === 'adaptive'\n            ? { thinking: { type: 'adaptive', display: 'summarized' }, effort: level }\n            : { thinking: { type: 'enabled', budgetTokens: ANTHROPIC_THINKING_BUDGET_TOKENS[level] } }),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Build a fetch function that handles Anthropic OAuth.\n * Preserves non-auth headers from init (critical for gateway auth header to survive\n * when used with the gateway). Strips `authorization` and `x-api-key`.\n */\nexport function buildAnthropicOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const storedCred = storage.get('anthropic');\n    if (storedCred?.type === 'api_key') {\n      throw new Error('Anthropic API key credential is configured, but OAuth is required.');\n    }\n\n    const accessToken = await storage.getApiKey('anthropic');\n    if (!accessToken) {\n      throw storage.get('anthropic')?.type === 'oauth'\n        ? ProviderAuthRequiredError.signInExpired(PROVIDER_NAME)\n        : ProviderAuthRequiredError.notSignedIn(PROVIDER_NAME);\n    }\n\n    // Preserve Request headers and let explicit init headers override them.\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    const requestBetas = (headers.get('anthropic-beta') ?? '')\n      .split(',')\n      .map(beta => beta.trim())\n      .filter(Boolean);\n    headers.set('anthropic-beta', Array.from(new Set([...OAUTH_REQUIRED_BETAS, ...requestBetas])).join(','));\n    headers.set('anthropic-version', '2023-06-01');\n\n    const requestUrl = url instanceof URL ? url.toString() : typeof url === 'string' ? url : url.url;\n    try {\n      return await rejectUnauthorizedResponse(await fetch(url, { ...init, headers }), {\n        providerName: PROVIDER_NAME,\n        requestUrl,\n      });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, { requestUrl });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an Anthropic model using Claude Max OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n */\nexport function opencodeClaudeMaxProvider(\n  modelId: string = 'claude-sonnet-5-5',\n  options?: {\n    headers?: Record<string, string>;\n    authStorage?: CredentialStore;\n    thinkingLevel?: ThinkingLevel;\n    promptCacheScope?: AnthropicPromptCacheScope;\n  },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, options?.thinkingLevel);\n  const middleware = [\n    claudeCodeMiddleware,\n    createPromptCacheMiddleware(options?.promptCacheScope ?? 'conversation'),\n    ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n  ];\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const anthropic = createAnthropic({\n      apiKey: 'test-api-key',\n      headers,\n    });\n    return wrapLanguageModel({\n      model: anthropic(modelId),\n      middleware,\n    });\n  }\n\n  const anthropic = createAnthropic({\n    apiKey: 'oauth-placeholder',\n    headers,\n    fetch: buildAnthropicOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Wrap with middleware to inject Claude Code identity and enable prompt caching\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,MAAM,gBAAgB;AAGtB,MAAM,qBAAqB;AAO3B,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;AACF;AAGA,IAAI,sBAA0C;;;;AAK9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;;;AAKA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;AAMA,MAAa,uBAAgD;CAC3D,sBAAsB;CACtB,iBAAiB,OAAO,EAAE,aAAa;EAErC,MAAM,gBAAgB;GACpB,MAAM;GACN,SAAS;EACX;EAEA,IAAI,OAAO,aACT,OAAO,OAAO;EAGhB,OAAO;GACL,GAAG;GACH,QAAQ,CAAC,eAAe,GAAG,OAAO,MAAM;EAC1C;CACF;AACF;;;;;;;;;;;;AAaA,MAAa,+BAA+B,WAA+D;CACzG,sBAAsB;CACtB,iBAAiB,OAAO,EAAE,aAAa;EACrC,MAAM,SAAS,CAAC,GAAG,OAAO,MAAM;EAEhC,MAAM,eAAe;GACnB,MAAM;GACN,KAAK,UAAU,iBAAA,OAA+C;EAChE;EAGA,MAAM,qBAAqB,QAAa;GAEtC,IAAI,OAAO,IAAI,YAAY,UACzB,OAAO;IACL,GAAG;IACH,iBAAiB;KACf,GAAG,IAAI;KACP,WAAW;MAAE,GAAG,IAAI,iBAAiB;MAAW;KAAa;IAC/D;GACF;GAIF,IAAI,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,SAAS,GAAG;IACxD,MAAM,UAAU,CAAC,GAAG,IAAI,OAAO;IAC/B,MAAM,WAAW,QAAQ,QAAQ,SAAS;IAC1C,QAAQ,QAAQ,SAAS,KAAK;KAC5B,GAAG;KACH,iBAAiB;MACf,GAAG,SAAS;MACZ,WAAW;OAAE,GAAG,SAAS,iBAAiB;OAAW;MAAa;KACpE;IACF;IACA,OAAO;KAAE,GAAG;KAAK;IAAQ;GAC3B;GAEA,OAAO;EACT;EAGA,IAAI,gBAAgB;EACpB,KAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KACtC,IAAK,OAAO,EAAE,CAAS,SAAS,UAAU;GACxC,gBAAgB;GAChB;EACF;EAIF,IAAI,iBAAiB,GACnB,OAAO,iBAAiB,kBAAkB,OAAO,cAAc;EAIjE,MAAM,UAAU,OAAO,SAAS;EAChC,IAAI,UAAU,kBAAkB,WAAW,KAAK,YAAY,eAC1D,OAAO,WAAW,kBAAkB,OAAO,QAAQ;EAGrD,OAAO;GAAE,GAAG;GAAQ;EAAO;CAC7B;AACF;AAEA,SAAS,yBAAyB,SAAiB,OAAqC;CACtF,OAAO,wBAAwB,aAAa,WAAW,KAAK;AAC9D;;;;;;;;;;;AAYA,SAAgB,kCACd,SACA,eACqC;CACrC,IAAI,CAAC,iBAAiB,kBAAkB,OAAO,OAAO,KAAA;CACtD,MAAM,aAAa,+BAA+B,OAAO;CACzD,MAAM,QAAQ,yBAAyB,SAAS,aAAa;CAC7D,IAAI,UAAU,OAAO,OAAO,KAAA;CAE5B,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GACrC,MAAM,mBAAoB,OAAO,iBAAiB,aAAa,CAAC;GAEhE,IAAI,iBAAiB,aAAa,KAAA,KAAa,iBAAiB,WAAW,KAAA,GACzE,OAAO;GAIT,OAAO,OAAO;GACd,OAAO,OAAO;GACd,OAAO,OAAO;GAEd,OAAO,kBAAkB;IACvB,GAAG,OAAO;IACV,WAAW;KACT,GAAG;KACH,GAAI,eAAe,aACf;MAAE,UAAU;OAAE,MAAM;OAAY,SAAS;MAAa;MAAG,QAAQ;KAAM,IACvE,EAAE,UAAU;MAAE,MAAM;MAAW,cAAc,iCAAiC;KAAO,EAAE;IAC7F;GACF;GAEA,OAAO;EACT;CACF;AACF;;;;;;AAOA,SAAgB,yBAAyB,OAA0C,CAAC,GAAiB;CACnG,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAGf,IADmB,QAAQ,IAAI,WAClB,CAAC,EAAE,SAAS,WACvB,MAAM,IAAI,MAAM,oEAAoE;EAGtF,MAAM,cAAc,MAAM,QAAQ,UAAU,WAAW;EACvD,IAAI,CAAC,aACH,MAAM,QAAQ,IAAI,WAAW,CAAC,EAAE,SAAS,UACrC,0BAA0B,cAAc,aAAa,IACrD,0BAA0B,YAAY,aAAa;EAIzD,MAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,KAAA,CAAS;EAC5E,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,MAAM,gBAAgB,QAAQ,IAAI,gBAAgB,KAAK,GAAA,CACpD,MAAM,GAAG,CAAC,CACV,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,OAAO,OAAO;EACjB,QAAQ,IAAI,kBAAkB,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAG,sBAAsB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;EACvG,QAAQ,IAAI,qBAAqB,YAAY;EAE7C,MAAM,aAAa,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAM,IAAI;EAC7F,IAAI;GACF,OAAO,MAAM,2BAA2B,MAAM,MAAM,KAAK;IAAE,GAAG;IAAM;GAAQ,CAAC,GAAG;IAC9E,cAAc;IACd;GACF,CAAC;EACH,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAAE,WAAW,CAAC;GAEhE,MAAM;EACR;CACF;AACF;;;;;AAMA,SAAgB,0BACd,UAAkB,qBAClB,SAMmB;CACnB,MAAM,UAAU,SAAS;CACzB,MAAM,qBAAqB,kCAAkC,SAAS,SAAS,aAAa;CAC5F,MAAM,aAAa;EACjB;EACA,4BAA4B,SAAS,oBAAoB,cAAc;EACvE,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;CACnD;CAGA,IAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;EACzD,MAAM,YAAY,gBAAgB;GAChC,QAAQ;GACR;EACF,CAAC;EACD,OAAO,kBAAkB;GACvB,OAAO,UAAU,OAAO;GACxB;EACF,CAAC;CACH;CAEA,MAAM,YAAY,gBAAgB;EAChC,QAAQ;EACR;EACA,OAAO,yBAAyB,EAAE,aAAa,SAAS,YAAY,CAAC;CACvE,CAAC;CAGD,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB;CACF,CAAC;AACH"}

package/dist/providers/github-copilot-gateway.js

@@ -1,6 +1,6 @@
 import { getAuthStorage, getCopilotModelCatalog, githubCopilotProvider } from "./github-copilot.js";
 import { MastraModelGateway } from "@mastra/core/llm";
-//#region src/providers/github-copilot-gateway.ts
+// src/providers/github-copilot-gateway.ts
 const GITHUB_COPILOT_GATEWAY_ID = "github-copilot";
 /**
 * Standalone GitHub Copilot gateway.
@@ -55,7 +55,6 @@ var GitHubCopilotGateway = class extends MastraModelGateway {
 function createGitHubCopilotGateway(options) {
 	return new GitHubCopilotGateway(options);
 }
-//#endregion
 export { GITHUB_COPILOT_GATEWAY_ID, GitHubCopilotGateway, createGitHubCopilotGateway };
 
 //# sourceMappingURL=github-copilot-gateway.js.map

package/dist/providers/github-copilot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-copilot.d.ts","sourceRoot":"","sources":["../../src/providers/github-copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAO1D,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AAOzE,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAqED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAkFd;AAwED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,MAAkB,EAC3B,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CAiBnB;AAsDD,wFAAwF;AACxF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAC3C,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA2F9B"}
+{"version":3,"file":"github-copilot.d.ts","sourceRoot":"","sources":["../../src/providers/github-copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAO1D,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AAQzE,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAqED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAgFd;AAwED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,MAAkB,EAC3B,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CAiBnB;AAsDD,wFAAwF;AACxF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAC3C,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA2F9B"}

package/dist/providers/github-copilot.js

@@ -4,7 +4,7 @@ import { ProviderAuthRequiredError, rejectUnauthorizedResponse } from "../auth/p
 import { wrapLanguageModel } from "ai";
 import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
 import { GoogleSchemaCompatLayer, applyCompatLayer } from "@mastra/schema-compat";
-//#region src/providers/github-copilot.ts
+// src/providers/github-copilot.ts
 /**
 * GitHub Copilot OAuth Provider
 *
@@ -18,6 +18,7 @@ import { GoogleSchemaCompatLayer, applyCompatLayer } from "@mastra/schema-compat
 *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts
 */
 const COPILOT_PROVIDER_ID = "github-copilot";
+const COPILOT_PROVIDER_NAME = "GitHub Copilot";
 let authStorageInstance = null;
 /** Get or create the shared AuthStorage instance. */
 function getAuthStorage() {
@@ -80,7 +81,7 @@ function buildGitHubCopilotOAuthFetch(opts = {}) {
 		const storage = opts.authStorage ?? getAuthStorage();
 		storage.reload();
 		const cred = storage.get(COPILOT_PROVIDER_ID);
-		if (!cred || cred.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to GitHub Copilot.");
+		if (!cred || cred.type !== "oauth") throw ProviderAuthRequiredError.notSignedIn(COPILOT_PROVIDER_NAME);
 		let accessToken;
 		let activeCred;
 		if (storage.getOAuthCredential) {
@@ -95,7 +96,7 @@ function buildGitHubCopilotOAuthFetch(opts = {}) {
 				access: accessToken ?? reloaded.access
 			} : void 0;
 		}
-		if (!accessToken || !activeCred) throw new ProviderAuthRequiredError("Failed to refresh the GitHub Copilot token.");
+		if (!accessToken || !activeCred) throw ProviderAuthRequiredError.signInExpired(COPILOT_PROVIDER_NAME);
 		const enterpriseUrl = activeCred.enterpriseUrl;
 		let parsedBody;
 		try {
@@ -128,7 +129,7 @@ function buildGitHubCopilotOAuthFetch(opts = {}) {
 		});
 		try {
 			return await rejectUnauthorizedResponse(await fetch(finalRequest), {
-				providerName: "GitHub Copilot",
+				providerName: COPILOT_PROVIDER_NAME,
 				requestUrl: finalUrl.toString()
 			});
 		} catch (error) {
@@ -316,7 +317,6 @@ async function getCopilotModelCatalog(opts = {}) {
 	if (dedupeKey !== void 0) inflightFetches.set(dedupeKey, fetchPromise);
 	return fetchPromise;
 }
-//#endregion
 export { buildGitHubCopilotOAuthFetch, clearCopilotCatalogCache, getAuthStorage, getCopilotModelCatalog, githubCopilotProvider, setAuthStorage };
 
 //# sourceMappingURL=github-copilot.js.map

package/dist/providers/github-copilot.js.map

@@ -1 +1 @@
-{"version":3,"file":"github-copilot.js","names":[],"sources":["../../src/providers/github-copilot.ts"],"sourcesContent":["/**\n * GitHub Copilot OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.\n * The Copilot API speaks an OpenAI-compatible chat format, so we plug\n * `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject\n * the bearer token and Copilot-specific headers.\n *\n * Inspired by:\n *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts\n *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport type { JSONSchema7 } from '@mastra/schema-compat';\nimport { applyCompatLayer, GoogleSchemaCompatLayer } from '@mastra/schema-compat';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { ProviderAuthRequiredError, rejectUnauthorizedResponse } from '../auth/provider-auth-error.js';\nimport { COPILOT_HEADERS, fetchCopilotModels, getGitHubCopilotBaseUrl } from '../auth/providers/github-copilot.js';\nimport type { CopilotModelEntry, GitHubCopilotCredentials } from '../auth/providers/github-copilot.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore, OAuthCredential } from '../auth/types.js';\n\nconst COPILOT_PROVIDER_ID = 'github-copilot';\n\n// Singleton auth storage instance (shared with claude-max.ts / openai-codex.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Heuristic: did this request come from the agent (e.g. tool result follow-ups) rather\n * than a fresh user turn? Mirrors opencode's `isAgent` logic — Copilot bills these\n * differently via the `x-initiator` header.\n */\nfunction detectIsAgent(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const messages = obj.messages;\n  if (Array.isArray(messages) && messages.length > 0) {\n    const last = messages[messages.length - 1] as { role?: string; content?: unknown };\n    if (last?.role && last.role !== 'user') return true;\n    if (Array.isArray(last?.content)) {\n      // If the last user turn carries any tool_result parts, treat it as an agent turn.\n      const hasToolResult = last.content.some(\n        (part: unknown) => part && typeof part === 'object' && (part as { type?: string }).type === 'tool_result',\n      );\n      if (hasToolResult) return true;\n    }\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input) && input.length > 0) {\n    const last = input[input.length - 1] as { role?: string };\n    if (last?.role && last.role !== 'user') return true;\n  }\n\n  return false;\n}\n\n/** Detect image/vision content in a request body. */\nfunction detectIsVision(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const matchPart = (part: unknown): boolean => {\n    if (!part || typeof part !== 'object') return false;\n    const t = (part as { type?: string }).type;\n    return t === 'image' || t === 'image_url' || t === 'input_image';\n  };\n\n  const messages = obj.messages;\n  if (Array.isArray(messages)) {\n    return messages.some(\n      (msg: unknown) =>\n        msg &&\n        typeof msg === 'object' &&\n        Array.isArray((msg as { content?: unknown }).content) &&\n        ((msg as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input)) {\n    return input.some(\n      (item: unknown) =>\n        item &&\n        typeof item === 'object' &&\n        Array.isArray((item as { content?: unknown }).content) &&\n        ((item as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  return false;\n}\n\n/**\n * Build a fetch wrapper that authenticates with GitHub Copilot OAuth.\n *\n * - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).\n * - Adds the VS Code-like Copilot headers required by the API.\n * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.\n */\nexport function buildGitHubCopilotOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { headers: initHeaders, ...requestInit } = init ?? {};\n    const request = new Request(url, requestInit);\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(COPILOT_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new ProviderAuthRequiredError('Not logged in to GitHub Copilot.');\n    }\n\n    let accessToken: string | undefined;\n    let activeCred: OAuthCredential | undefined;\n    if (storage.getOAuthCredential) {\n      activeCred = await storage.getOAuthCredential(COPILOT_PROVIDER_ID);\n      accessToken = activeCred?.access;\n    } else {\n      accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n      storage.reload();\n      const reloaded = storage.get(COPILOT_PROVIDER_ID);\n      activeCred = reloaded?.type === 'oauth' ? { ...reloaded, access: accessToken ?? reloaded.access } : undefined;\n    }\n    if (!accessToken || !activeCred) {\n      throw new ProviderAuthRequiredError('Failed to refresh the GitHub Copilot token.');\n    }\n    const enterpriseUrl = (activeCred as GitHubCopilotCredentials).enterpriseUrl;\n\n    let parsedBody: unknown;\n    try {\n      const body = await request.clone().text();\n      parsedBody = body ? JSON.parse(body) : undefined;\n    } catch {\n      parsedBody = undefined;\n    }\n    const isAgent = detectIsAgent(parsedBody);\n    const isVision = detectIsVision(parsedBody);\n\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (initHeaders) new Headers(initHeaders).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('x-initiator', isAgent ? 'agent' : 'user');\n    headers.set('Openai-Intent', 'conversation-edits');\n    if (isVision) {\n      headers.set('Copilot-Vision-Request', 'true');\n    }\n    for (const [key, value] of Object.entries(COPILOT_HEADERS)) {\n      // Only set if caller didn't already provide it (allow overrides for tests).\n      if (!headers.has(key)) {\n        headers.set(key, value);\n      }\n    }\n\n    const finalUrl =\n      opts.rewriteUrl !== false ? rewriteToCopilotBase(request, accessToken, enterpriseUrl) : new URL(request.url);\n\n    const body = request.method === 'GET' || request.method === 'HEAD' ? undefined : request.body;\n    const finalRequest = new Request(finalUrl, {\n      method: request.method,\n      headers,\n      body,\n      signal: request.signal,\n      redirect: request.redirect,\n      integrity: request.integrity,\n      ...(body ? ({ duplex: 'half' } as RequestInit) : {}),\n    });\n    try {\n      return await rejectUnauthorizedResponse(await fetch(finalRequest), {\n        providerName: 'GitHub Copilot',\n        requestUrl: finalUrl.toString(),\n      });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction rewriteToCopilotBase(url: string | URL | Request, token: string, enterpriseDomain?: string): URL {\n  const original = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n  const base = new URL(getGitHubCopilotBaseUrl(token, enterpriseDomain));\n  // Copilot's OpenAI-compatible API serves endpoints at the root of the base host\n  // (`/chat/completions`, `/responses`, `/models`, ...) — not under a `/v1/` prefix\n  // like api.openai.com does. The @ai-sdk/openai default baseURL is\n  // `https://api.openai.com/v1`, so the SDK builds requests like\n  // `https://api.openai.com/v1/chat/completions`. Strip the leading `/v1` segment\n  // when rewriting onto the Copilot base or Copilot will return 404 Not Found.\n  const pathname = original.pathname.replace(/^\\/v1(\\/|$)/, '/');\n  return new URL(`${pathname}${original.search}`, base);\n}\n\nfunction isGeminiModel(modelId: string): boolean {\n  return modelId.startsWith('gemini-');\n}\n\nfunction applyGeminiSchemaCompatToTools(modelId: string, tools: unknown): unknown {\n  if (!Array.isArray(tools)) {\n    return tools;\n  }\n\n  const compatLayer = new GoogleSchemaCompatLayer({\n    provider: COPILOT_PROVIDER_ID,\n    modelId,\n    supportsStructuredOutputs: false,\n  });\n\n  return tools.map(tool => {\n    if (!tool || typeof tool !== 'object' || (tool as { type?: unknown }).type !== 'function') {\n      return tool;\n    }\n\n    const functionTool = tool as { inputSchema?: JSONSchema7 };\n    if (!functionTool.inputSchema) {\n      return tool;\n    }\n\n    return {\n      ...functionTool,\n      inputSchema: applyCompatLayer({\n        schema: functionTool.inputSchema,\n        compatLayers: [compatLayer],\n        mode: 'aiSdkSchema',\n      }).jsonSchema as JSONSchema7,\n    };\n  });\n}\n\n/** Middleware that prevents sending parameters Copilot's endpoint rejects. */\nfunction createCopilotMiddleware(modelId: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      if (isGeminiModel(modelId)) {\n        (params as { tools?: unknown }).tools = applyGeminiSchemaCompatToTools(\n          modelId,\n          (params as { tools?: unknown }).tools,\n        );\n      }\n\n      return params;\n    },\n  };\n}\n\n/**\n * Creates a model that talks to GitHub Copilot using OAuth credentials.\n *\n * Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot\n * is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL\n * instead of the OpenAI provider plus URL rewriting.\n */\nexport function githubCopilotProvider(\n  modelId: string = 'gpt-4.1',\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const copilot = createOpenAICompatible({\n    name: COPILOT_PROVIDER_ID,\n    baseURL: 'https://api.githubcopilot.com',\n    apiKey: process.env.NODE_ENV === 'test' || process.env.VITEST ? 'test-api-key' : 'oauth-placeholder',\n    headers,\n    fetch:\n      process.env.NODE_ENV === 'test' || process.env.VITEST\n        ? undefined\n        : (buildGitHubCopilotOAuthFetch({ rewriteUrl: false, authStorage: options?.authStorage }) as any),\n  });\n\n  return wrapLanguageModel({\n    model: copilot.chatModel(modelId),\n    middleware: [createCopilotMiddleware(modelId)],\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live model catalog\n// ---------------------------------------------------------------------------\n\n/**\n * Hard-coded fallback advertised when the live `/models` request fails (network\n * down, expired token, etc.). Keep this conservative because the live catalog is\n * the source of truth for the user's currently-enabled Copilot models.\n *\n * Available across all paid Copilot tiers and free of premium-request charges.\n */\nconst COPILOT_FALLBACK_MODELS: CopilotModelEntry[] = [\n  {\n    id: 'gpt-4.1',\n    name: 'GPT-4.1',\n    vendor: 'OpenAI',\n    supportedEndpoints: ['/chat/completions'],\n    isAnthropicShaped: false,\n    supportsVision: true,\n    supportsToolCalls: true,\n  },\n];\n\nconst CATALOG_TTL_MS = 10 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: CopilotModelEntry[];\n}\n\nconst catalogCache = new Map<string, CatalogCacheEntry>();\nconst inflightFetches = new Map<string, Promise<CopilotModelEntry[]>>();\n\n/**\n * Resolve the account identity for a credential read through `getApiKey`, which\n * may await a refresh with a rotation landing inside it. The registry is\n * consulted on both sides of that await, and only an id that survived it names\n * the account that produced the token: an id that moved describes whichever\n * account is active *now*, so trusting it would file this fetch's models under\n * the wrong account and serve them to it. Unidentified is the safe answer — the\n * caller then skips the TTL cache, exactly as it does when the store exposes no\n * registry at all. (`AuthStorage` never needs this: its snapshots name their\n * account.)\n */\nfunction readStableAccountId(storage: CredentialStore, idBeforeToken: string | undefined): string | undefined {\n  const idAfterToken = storage.getActiveAccount?.(COPILOT_PROVIDER_ID)?.id;\n  return idBeforeToken !== undefined && idBeforeToken === idAfterToken ? idAfterToken : undefined;\n}\n\n/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */\nexport function clearCopilotCatalogCache(): void {\n  catalogCache.clear();\n  inflightFetches.clear();\n}\n\n/**\n * Return the user's currently-available Copilot models.\n *\n * - Returns `[]` when the user is not logged in to GitHub Copilot.\n * - Returns the cached list when a recent fetch succeeded.\n * - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters\n *   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that for 1 minute to avoid hammering the API.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getCopilotModelCatalog(\n  opts: { authStorage?: CredentialStore } = {},\n): Promise<CopilotModelEntry[]> {\n  const storage = opts.authStorage ?? getAuthStorage();\n\n  // Resolve one coherent credential snapshot before consulting the cache so a\n  // token can never be paired with another account's enterprise endpoint.\n  // `getOAuthCredential` is optional (deployed stores have no local registry),\n  // so fall back to the always-present `getApiKey`, taking any enterprise\n  // endpoint from the same slot via `get()`.\n  let accessToken: string | undefined;\n  let accountInstanceId: string | undefined;\n  let enterpriseUrl: string | undefined;\n  if (storage.getOAuthCredential) {\n    const credential = await storage.getOAuthCredential(COPILOT_PROVIDER_ID);\n    if (!credential || credential.type !== 'oauth') return [];\n    accessToken = credential.access;\n    // A snapshot that names its account is coherent by construction — the store\n    // read the identity and the token in the same breath. One that does not\n    // cannot be attributed to a registry entry we then read afterwards, because\n    // a rotation may have landed in between; leave it unnamed so the caller\n    // skips the TTL cache instead of guessing. (`AuthStorage` always stamps.)\n    accountInstanceId = credential.accountInstanceId;\n    enterpriseUrl = (credential as GitHubCopilotCredentials).enterpriseUrl;\n  } else {\n    // This store republishes its registry but not the OAuth snapshot API, so the\n    // identity has to come from the registry. `getApiKey` may await a refresh and\n    // a rotation can land inside it, so bracket the fetch: only an id that held\n    // still names the account that produced this token.\n    const idBeforeToken = storage.getActiveAccount?.(COPILOT_PROVIDER_ID)?.id;\n    accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n    if (!accessToken) return [];\n    accountInstanceId = readStableAccountId(storage, idBeforeToken);\n    const stored = storage.get(COPILOT_PROVIDER_ID);\n    if (stored?.type === 'oauth') {\n      enterpriseUrl = (stored as GitHubCopilotCredentials).enterpriseUrl;\n    }\n    // The id is non-secret, and keying per account is what keeps entitlements\n    // (per account, per `github-copilot-catalog.test.ts`) from leaking across a\n    // rotation. Deriving the key from the token is what `cba11389e7` removed.\n  }\n  const baseUrl = getGitHubCopilotBaseUrl(accessToken, enterpriseUrl);\n  // No identity means the store cannot name the account it just served, so the\n  // TTL cache cannot be keyed per account — one entry would outlive the request\n  // and serve those models to every other account of the store. The in-flight\n  // map is no safer: two callers that resolved *different* accounts of an\n  // unnamed store would otherwise collide on one key and share whichever\n  // catalog was fetched first. So both caches are identified-only, and an\n  // unnamed store pays one `/models` request per call.\n  const credentialKey = accountInstanceId === undefined ? undefined : `${accountInstanceId}\\0${baseUrl}`;\n  const dedupeKey = credentialKey;\n\n  const now = Date.now();\n  const cached = credentialKey ? catalogCache.get(credentialKey) : undefined;\n  if (cached && now - cached.fetchedAt < cached.ttl) return cached.models;\n\n  const existingFetch = dedupeKey === undefined ? undefined : inflightFetches.get(dedupeKey);\n  if (existingFetch) return existingFetch;\n\n  const fetchPromise = (async (): Promise<CopilotModelEntry[]> => {\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n      try {\n        const models = await fetchCopilotModels({\n          baseUrl,\n          bearerToken: accessToken,\n          signal: controller.signal,\n        });\n        if (credentialKey) catalogCache.set(credentialKey, { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models });\n        return models;\n      } finally {\n        clearTimeout(timer);\n      }\n    } catch (error) {\n      if (credentialKey) {\n        catalogCache.set(credentialKey, {\n          fetchedAt: Date.now(),\n          ttl: CATALOG_FAILURE_TTL_MS,\n          models: COPILOT_FALLBACK_MODELS,\n        });\n      }\n      console.warn(\n        'Failed to fetch live GitHub Copilot models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return COPILOT_FALLBACK_MODELS;\n    } finally {\n      if (dedupeKey !== undefined) inflightFetches.delete(dedupeKey);\n    }\n  })();\n  if (dedupeKey !== undefined) inflightFetches.set(dedupeKey, fetchPromise);\n  return fetchPromise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAyBA,MAAM,sBAAsB;AAG5B,IAAI,sBAA0C;;AAG9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;AAGA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;;AAOA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAM;CAEZ,MAAM,WAAW,IAAI;CACrB,IAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAAG;EAClD,MAAM,OAAO,SAAS,SAAS,SAAS;EACxC,IAAI,MAAM,QAAQ,KAAK,SAAS,QAAQ,OAAO;EAC/C,IAAI,MAAM,QAAQ,MAAM,OAAO,GAEP;OAAA,KAAK,QAAQ,MAChC,SAAkB,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS,aAE9E,GAAG,OAAO;EAAA;CAE9B;CAEA,MAAM,QAAQ,IAAI;CAClB,IAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;EAC5C,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,IAAI,MAAM,QAAQ,KAAK,SAAS,QAAQ,OAAO;CACjD;CAEA,OAAO;AACT;;AAGA,SAAS,eAAe,MAAwB;CAC9C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAM;CAEZ,MAAM,aAAa,SAA2B;EAC5C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;EAC9C,MAAM,IAAK,KAA2B;EACtC,OAAO,MAAM,WAAW,MAAM,eAAe,MAAM;CACrD;CAEA,MAAM,WAAW,IAAI;CACrB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,SAAS,MACb,QACC,OACA,OAAO,QAAQ,YACf,MAAM,QAAS,IAA8B,OAAO,KAClD,IAA+B,QAAsB,KAAK,SAAS,CACzE;CAGF,MAAM,QAAQ,IAAI;CAClB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,MACV,SACC,QACA,OAAO,SAAS,YAChB,MAAM,QAAS,KAA+B,OAAO,KACnD,KAAgC,QAAsB,KAAK,SAAS,CAC1E;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,6BACd,OAAgE,CAAC,GACnD;CACd,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,EAAE,SAAS,aAAa,GAAG,gBAAgB,QAAQ,CAAC;EAC1D,MAAM,UAAU,IAAI,QAAQ,KAAK,WAAW;EAC5C,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAEf,MAAM,OAAO,QAAQ,IAAI,mBAAmB;EAC5C,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,0BAA0B,kCAAkC;EAGxE,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,oBAAoB;GAC9B,aAAa,MAAM,QAAQ,mBAAmB,mBAAmB;GACjE,cAAc,YAAY;EAC5B,OAAO;GACL,cAAc,MAAM,QAAQ,UAAU,mBAAmB;GACzD,QAAQ,OAAO;GACf,MAAM,WAAW,QAAQ,IAAI,mBAAmB;GAChD,aAAa,UAAU,SAAS,UAAU;IAAE,GAAG;IAAU,QAAQ,eAAe,SAAS;GAAO,IAAI,KAAA;EACtG;EACA,IAAI,CAAC,eAAe,CAAC,YACnB,MAAM,IAAI,0BAA0B,6CAA6C;EAEnF,MAAM,gBAAiB,WAAwC;EAE/D,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,MAAM,QAAQ,MAAM,CAAC,CAAC,KAAK;GACxC,aAAa,OAAO,KAAK,MAAM,IAAI,IAAI,KAAA;EACzC,QAAQ;GACN,aAAa,KAAA;EACf;EACA,MAAM,UAAU,cAAc,UAAU;EACxC,MAAM,WAAW,eAAe,UAAU;EAE1C,MAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,KAAA,CAAS;EAC5E,IAAI,aAAa,IAAI,QAAQ,WAAW,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EACzF,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,QAAQ,IAAI,eAAe,UAAU,UAAU,MAAM;EACrD,QAAQ,IAAI,iBAAiB,oBAAoB;EACjD,IAAI,UACF,QAAQ,IAAI,0BAA0B,MAAM;EAE9C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,eAAe,GAEvD,IAAI,CAAC,QAAQ,IAAI,GAAG,GAClB,QAAQ,IAAI,KAAK,KAAK;EAI1B,MAAM,WACJ,KAAK,eAAe,QAAQ,qBAAqB,SAAS,aAAa,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;EAE7G,MAAM,OAAO,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAAS,KAAA,IAAY,QAAQ;EACzF,MAAM,eAAe,IAAI,QAAQ,UAAU;GACzC,QAAQ,QAAQ;GAChB;GACA;GACA,QAAQ,QAAQ;GAChB,UAAU,QAAQ;GAClB,WAAW,QAAQ;GACnB,GAAI,OAAQ,EAAE,QAAQ,OAAO,IAAoB,CAAC;EACpD,CAAC;EACD,IAAI;GACF,OAAO,MAAM,2BAA2B,MAAM,MAAM,YAAY,GAAG;IACjE,cAAc;IACd,YAAY,SAAS,SAAS;GAChC,CAAC;EACH,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,SAAS,SAAS,EAChC,CAAC;GAEH,MAAM;EACR;CACF;AACF;AAEA,SAAS,qBAAqB,KAA6B,OAAe,kBAAgC;CACxG,MAAM,WAAW,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;CACxG,MAAM,OAAO,IAAI,IAAI,wBAAwB,OAAO,gBAAgB,CAAC;CAOrE,MAAM,WAAW,SAAS,SAAS,QAAQ,eAAe,GAAG;CAC7D,OAAO,IAAI,IAAI,GAAG,WAAW,SAAS,UAAU,IAAI;AACtD;AAEA,SAAS,cAAc,SAA0B;CAC/C,OAAO,QAAQ,WAAW,SAAS;AACrC;AAEA,SAAS,+BAA+B,SAAiB,OAAyB;CAChF,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;CAGT,MAAM,cAAc,IAAI,wBAAwB;EAC9C,UAAU;EACV;EACA,2BAA2B;CAC7B,CAAC;CAED,OAAO,MAAM,KAAI,SAAQ;EACvB,IAAI,CAAC,QAAQ,OAAO,SAAS,YAAa,KAA4B,SAAS,YAC7E,OAAO;EAGT,MAAM,eAAe;EACrB,IAAI,CAAC,aAAa,aAChB,OAAO;EAGT,OAAO;GACL,GAAG;GACH,aAAa,iBAAiB;IAC5B,QAAQ,aAAa;IACrB,cAAc,CAAC,WAAW;IAC1B,MAAM;GACR,CAAC,CAAC,CAAC;EACL;CACF,CAAC;AACH;;AAGA,SAAS,wBAAwB,SAA0C;CACzE,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GACrC,IAAI,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,MAC7D,OAAO,OAAO;GAGhB,IAAI,cAAc,OAAO,GACvB,OAAgC,QAAQ,+BACtC,SACC,OAA+B,KAClC;GAGF,OAAO;EACT;CACF;AACF;;;;;;;;AASA,SAAgB,sBACd,UAAkB,WAClB,SACmB;CACnB,MAAM,UAAU,SAAS;CACzB,MAAM,UAAU,uBAAuB;EACrC,MAAM;EACN,SAAS;EACT,QAAQ,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAAS,iBAAiB;EACjF;EACA,OACE,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAC3C,KAAA,IACC,6BAA6B;GAAE,YAAY;GAAO,aAAa,SAAS;EAAY,CAAC;CAC9F,CAAC;CAED,OAAO,kBAAkB;EACvB,OAAO,QAAQ,UAAU,OAAO;EAChC,YAAY,CAAC,wBAAwB,OAAO,CAAC;CAC/C,CAAC;AACH;;;;;;;;AAaA,MAAM,0BAA+C,CACnD;CACE,IAAI;CACJ,MAAM;CACN,QAAQ;CACR,oBAAoB,CAAC,mBAAmB;CACxC,mBAAmB;CACnB,gBAAgB;CAChB,mBAAmB;AACrB,CACF;AAEA,MAAM,iBAAiB;AACvB,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AAQjC,MAAM,+BAAe,IAAI,IAA+B;AACxD,MAAM,kCAAkB,IAAI,IAA0C;;;;;;;;;;;;AAatE,SAAS,oBAAoB,SAA0B,eAAuD;CAC5G,MAAM,eAAe,QAAQ,mBAAmB,mBAAmB,CAAC,EAAE;CACtE,OAAO,kBAAkB,KAAA,KAAa,kBAAkB,eAAe,eAAe,KAAA;AACxF;;AAGA,SAAgB,2BAAiC;CAC/C,aAAa,MAAM;CACnB,gBAAgB,MAAM;AACxB;;;;;;;;;;;;;AAcA,eAAsB,uBACpB,OAA0C,CAAC,GACb;CAC9B,MAAM,UAAU,KAAK,eAAe,eAAe;CAOnD,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,QAAQ,oBAAoB;EAC9B,MAAM,aAAa,MAAM,QAAQ,mBAAmB,mBAAmB;EACvE,IAAI,CAAC,cAAc,WAAW,SAAS,SAAS,OAAO,CAAC;EACxD,cAAc,WAAW;EAMzB,oBAAoB,WAAW;EAC/B,gBAAiB,WAAwC;CAC3D,OAAO;EAKL,MAAM,gBAAgB,QAAQ,mBAAmB,mBAAmB,CAAC,EAAE;EACvE,cAAc,MAAM,QAAQ,UAAU,mBAAmB;EACzD,IAAI,CAAC,aAAa,OAAO,CAAC;EAC1B,oBAAoB,oBAAoB,SAAS,aAAa;EAC9D,MAAM,SAAS,QAAQ,IAAI,mBAAmB;EAC9C,IAAI,QAAQ,SAAS,SACnB,gBAAiB,OAAoC;CAKzD;CACA,MAAM,UAAU,wBAAwB,aAAa,aAAa;CAQlE,MAAM,gBAAgB,sBAAsB,KAAA,IAAY,KAAA,IAAY,GAAG,kBAAkB,IAAI;CAC7F,MAAM,YAAY;CAElB,MAAM,MAAM,KAAK,IAAI;CACrB,MAAM,SAAS,gBAAgB,aAAa,IAAI,aAAa,IAAI,KAAA;CACjE,IAAI,UAAU,MAAM,OAAO,YAAY,OAAO,KAAK,OAAO,OAAO;CAEjE,MAAM,gBAAgB,cAAc,KAAA,IAAY,KAAA,IAAY,gBAAgB,IAAI,SAAS;CACzF,IAAI,eAAe,OAAO;CAE1B,MAAM,gBAAgB,YAA0C;EAC9D,IAAI;GACF,MAAM,aAAa,IAAI,gBAAgB;GACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,wBAAwB;GAC3E,IAAI;IACF,MAAM,SAAS,MAAM,mBAAmB;KACtC;KACA,aAAa;KACb,QAAQ,WAAW;IACrB,CAAC;IACD,IAAI,eAAe,aAAa,IAAI,eAAe;KAAE,WAAW,KAAK,IAAI;KAAG,KAAK;KAAgB;IAAO,CAAC;IACzG,OAAO;GACT,UAAU;IACR,aAAa,KAAK;GACpB;EACF,SAAS,OAAO;GACd,IAAI,eACF,aAAa,IAAI,eAAe;IAC9B,WAAW,KAAK,IAAI;IACpB,KAAK;IACL,QAAQ;GACV,CAAC;GAEH,QAAQ,KACN,oEACA,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;GACA,OAAO;EACT,UAAU;GACR,IAAI,cAAc,KAAA,GAAW,gBAAgB,OAAO,SAAS;EAC/D;CACF,EAAA,CAAG;CACH,IAAI,cAAc,KAAA,GAAW,gBAAgB,IAAI,WAAW,YAAY;CACxE,OAAO;AACT"}
+{"version":3,"file":"github-copilot.js","names":[],"sources":["../../src/providers/github-copilot.ts"],"sourcesContent":["/**\n * GitHub Copilot OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.\n * The Copilot API speaks an OpenAI-compatible chat format, so we plug\n * `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject\n * the bearer token and Copilot-specific headers.\n *\n * Inspired by:\n *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts\n *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport type { JSONSchema7 } from '@mastra/schema-compat';\nimport { applyCompatLayer, GoogleSchemaCompatLayer } from '@mastra/schema-compat';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { ProviderAuthRequiredError, rejectUnauthorizedResponse } from '../auth/provider-auth-error.js';\nimport { COPILOT_HEADERS, fetchCopilotModels, getGitHubCopilotBaseUrl } from '../auth/providers/github-copilot.js';\nimport type { CopilotModelEntry, GitHubCopilotCredentials } from '../auth/providers/github-copilot.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore, OAuthCredential } from '../auth/types.js';\n\nconst COPILOT_PROVIDER_ID = 'github-copilot';\nconst COPILOT_PROVIDER_NAME = 'GitHub Copilot';\n\n// Singleton auth storage instance (shared with claude-max.ts / openai-codex.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Heuristic: did this request come from the agent (e.g. tool result follow-ups) rather\n * than a fresh user turn? Mirrors opencode's `isAgent` logic — Copilot bills these\n * differently via the `x-initiator` header.\n */\nfunction detectIsAgent(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const messages = obj.messages;\n  if (Array.isArray(messages) && messages.length > 0) {\n    const last = messages[messages.length - 1] as { role?: string; content?: unknown };\n    if (last?.role && last.role !== 'user') return true;\n    if (Array.isArray(last?.content)) {\n      // If the last user turn carries any tool_result parts, treat it as an agent turn.\n      const hasToolResult = last.content.some(\n        (part: unknown) => part && typeof part === 'object' && (part as { type?: string }).type === 'tool_result',\n      );\n      if (hasToolResult) return true;\n    }\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input) && input.length > 0) {\n    const last = input[input.length - 1] as { role?: string };\n    if (last?.role && last.role !== 'user') return true;\n  }\n\n  return false;\n}\n\n/** Detect image/vision content in a request body. */\nfunction detectIsVision(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const matchPart = (part: unknown): boolean => {\n    if (!part || typeof part !== 'object') return false;\n    const t = (part as { type?: string }).type;\n    return t === 'image' || t === 'image_url' || t === 'input_image';\n  };\n\n  const messages = obj.messages;\n  if (Array.isArray(messages)) {\n    return messages.some(\n      (msg: unknown) =>\n        msg &&\n        typeof msg === 'object' &&\n        Array.isArray((msg as { content?: unknown }).content) &&\n        ((msg as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input)) {\n    return input.some(\n      (item: unknown) =>\n        item &&\n        typeof item === 'object' &&\n        Array.isArray((item as { content?: unknown }).content) &&\n        ((item as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  return false;\n}\n\n/**\n * Build a fetch wrapper that authenticates with GitHub Copilot OAuth.\n *\n * - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).\n * - Adds the VS Code-like Copilot headers required by the API.\n * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.\n */\nexport function buildGitHubCopilotOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { headers: initHeaders, ...requestInit } = init ?? {};\n    const request = new Request(url, requestInit);\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(COPILOT_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw ProviderAuthRequiredError.notSignedIn(COPILOT_PROVIDER_NAME);\n    }\n\n    let accessToken: string | undefined;\n    let activeCred: OAuthCredential | undefined;\n    if (storage.getOAuthCredential) {\n      activeCred = await storage.getOAuthCredential(COPILOT_PROVIDER_ID);\n      accessToken = activeCred?.access;\n    } else {\n      accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n      storage.reload();\n      const reloaded = storage.get(COPILOT_PROVIDER_ID);\n      activeCred = reloaded?.type === 'oauth' ? { ...reloaded, access: accessToken ?? reloaded.access } : undefined;\n    }\n    if (!accessToken || !activeCred) throw ProviderAuthRequiredError.signInExpired(COPILOT_PROVIDER_NAME);\n    const enterpriseUrl = (activeCred as GitHubCopilotCredentials).enterpriseUrl;\n\n    let parsedBody: unknown;\n    try {\n      const body = await request.clone().text();\n      parsedBody = body ? JSON.parse(body) : undefined;\n    } catch {\n      parsedBody = undefined;\n    }\n    const isAgent = detectIsAgent(parsedBody);\n    const isVision = detectIsVision(parsedBody);\n\n    const headers = new Headers(url instanceof Request ? url.headers : undefined);\n    if (initHeaders) new Headers(initHeaders).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('x-initiator', isAgent ? 'agent' : 'user');\n    headers.set('Openai-Intent', 'conversation-edits');\n    if (isVision) {\n      headers.set('Copilot-Vision-Request', 'true');\n    }\n    for (const [key, value] of Object.entries(COPILOT_HEADERS)) {\n      // Only set if caller didn't already provide it (allow overrides for tests).\n      if (!headers.has(key)) {\n        headers.set(key, value);\n      }\n    }\n\n    const finalUrl =\n      opts.rewriteUrl !== false ? rewriteToCopilotBase(request, accessToken, enterpriseUrl) : new URL(request.url);\n\n    const body = request.method === 'GET' || request.method === 'HEAD' ? undefined : request.body;\n    const finalRequest = new Request(finalUrl, {\n      method: request.method,\n      headers,\n      body,\n      signal: request.signal,\n      redirect: request.redirect,\n      integrity: request.integrity,\n      ...(body ? ({ duplex: 'half' } as RequestInit) : {}),\n    });\n    try {\n      return await rejectUnauthorizedResponse(await fetch(finalRequest), {\n        providerName: COPILOT_PROVIDER_NAME,\n        requestUrl: finalUrl.toString(),\n      });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction rewriteToCopilotBase(url: string | URL | Request, token: string, enterpriseDomain?: string): URL {\n  const original = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n  const base = new URL(getGitHubCopilotBaseUrl(token, enterpriseDomain));\n  // Copilot's OpenAI-compatible API serves endpoints at the root of the base host\n  // (`/chat/completions`, `/responses`, `/models`, ...) — not under a `/v1/` prefix\n  // like api.openai.com does. The @ai-sdk/openai default baseURL is\n  // `https://api.openai.com/v1`, so the SDK builds requests like\n  // `https://api.openai.com/v1/chat/completions`. Strip the leading `/v1` segment\n  // when rewriting onto the Copilot base or Copilot will return 404 Not Found.\n  const pathname = original.pathname.replace(/^\\/v1(\\/|$)/, '/');\n  return new URL(`${pathname}${original.search}`, base);\n}\n\nfunction isGeminiModel(modelId: string): boolean {\n  return modelId.startsWith('gemini-');\n}\n\nfunction applyGeminiSchemaCompatToTools(modelId: string, tools: unknown): unknown {\n  if (!Array.isArray(tools)) {\n    return tools;\n  }\n\n  const compatLayer = new GoogleSchemaCompatLayer({\n    provider: COPILOT_PROVIDER_ID,\n    modelId,\n    supportsStructuredOutputs: false,\n  });\n\n  return tools.map(tool => {\n    if (!tool || typeof tool !== 'object' || (tool as { type?: unknown }).type !== 'function') {\n      return tool;\n    }\n\n    const functionTool = tool as { inputSchema?: JSONSchema7 };\n    if (!functionTool.inputSchema) {\n      return tool;\n    }\n\n    return {\n      ...functionTool,\n      inputSchema: applyCompatLayer({\n        schema: functionTool.inputSchema,\n        compatLayers: [compatLayer],\n        mode: 'aiSdkSchema',\n      }).jsonSchema as JSONSchema7,\n    };\n  });\n}\n\n/** Middleware that prevents sending parameters Copilot's endpoint rejects. */\nfunction createCopilotMiddleware(modelId: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      if (isGeminiModel(modelId)) {\n        (params as { tools?: unknown }).tools = applyGeminiSchemaCompatToTools(\n          modelId,\n          (params as { tools?: unknown }).tools,\n        );\n      }\n\n      return params;\n    },\n  };\n}\n\n/**\n * Creates a model that talks to GitHub Copilot using OAuth credentials.\n *\n * Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot\n * is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL\n * instead of the OpenAI provider plus URL rewriting.\n */\nexport function githubCopilotProvider(\n  modelId: string = 'gpt-4.1',\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const copilot = createOpenAICompatible({\n    name: COPILOT_PROVIDER_ID,\n    baseURL: 'https://api.githubcopilot.com',\n    apiKey: process.env.NODE_ENV === 'test' || process.env.VITEST ? 'test-api-key' : 'oauth-placeholder',\n    headers,\n    fetch:\n      process.env.NODE_ENV === 'test' || process.env.VITEST\n        ? undefined\n        : (buildGitHubCopilotOAuthFetch({ rewriteUrl: false, authStorage: options?.authStorage }) as any),\n  });\n\n  return wrapLanguageModel({\n    model: copilot.chatModel(modelId),\n    middleware: [createCopilotMiddleware(modelId)],\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live model catalog\n// ---------------------------------------------------------------------------\n\n/**\n * Hard-coded fallback advertised when the live `/models` request fails (network\n * down, expired token, etc.). Keep this conservative because the live catalog is\n * the source of truth for the user's currently-enabled Copilot models.\n *\n * Available across all paid Copilot tiers and free of premium-request charges.\n */\nconst COPILOT_FALLBACK_MODELS: CopilotModelEntry[] = [\n  {\n    id: 'gpt-4.1',\n    name: 'GPT-4.1',\n    vendor: 'OpenAI',\n    supportedEndpoints: ['/chat/completions'],\n    isAnthropicShaped: false,\n    supportsVision: true,\n    supportsToolCalls: true,\n  },\n];\n\nconst CATALOG_TTL_MS = 10 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: CopilotModelEntry[];\n}\n\nconst catalogCache = new Map<string, CatalogCacheEntry>();\nconst inflightFetches = new Map<string, Promise<CopilotModelEntry[]>>();\n\n/**\n * Resolve the account identity for a credential read through `getApiKey`, which\n * may await a refresh with a rotation landing inside it. The registry is\n * consulted on both sides of that await, and only an id that survived it names\n * the account that produced the token: an id that moved describes whichever\n * account is active *now*, so trusting it would file this fetch's models under\n * the wrong account and serve them to it. Unidentified is the safe answer — the\n * caller then skips the TTL cache, exactly as it does when the store exposes no\n * registry at all. (`AuthStorage` never needs this: its snapshots name their\n * account.)\n */\nfunction readStableAccountId(storage: CredentialStore, idBeforeToken: string | undefined): string | undefined {\n  const idAfterToken = storage.getActiveAccount?.(COPILOT_PROVIDER_ID)?.id;\n  return idBeforeToken !== undefined && idBeforeToken === idAfterToken ? idAfterToken : undefined;\n}\n\n/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */\nexport function clearCopilotCatalogCache(): void {\n  catalogCache.clear();\n  inflightFetches.clear();\n}\n\n/**\n * Return the user's currently-available Copilot models.\n *\n * - Returns `[]` when the user is not logged in to GitHub Copilot.\n * - Returns the cached list when a recent fetch succeeded.\n * - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters\n *   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that for 1 minute to avoid hammering the API.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getCopilotModelCatalog(\n  opts: { authStorage?: CredentialStore } = {},\n): Promise<CopilotModelEntry[]> {\n  const storage = opts.authStorage ?? getAuthStorage();\n\n  // Resolve one coherent credential snapshot before consulting the cache so a\n  // token can never be paired with another account's enterprise endpoint.\n  // `getOAuthCredential` is optional (deployed stores have no local registry),\n  // so fall back to the always-present `getApiKey`, taking any enterprise\n  // endpoint from the same slot via `get()`.\n  let accessToken: string | undefined;\n  let accountInstanceId: string | undefined;\n  let enterpriseUrl: string | undefined;\n  if (storage.getOAuthCredential) {\n    const credential = await storage.getOAuthCredential(COPILOT_PROVIDER_ID);\n    if (!credential || credential.type !== 'oauth') return [];\n    accessToken = credential.access;\n    // A snapshot that names its account is coherent by construction — the store\n    // read the identity and the token in the same breath. One that does not\n    // cannot be attributed to a registry entry we then read afterwards, because\n    // a rotation may have landed in between; leave it unnamed so the caller\n    // skips the TTL cache instead of guessing. (`AuthStorage` always stamps.)\n    accountInstanceId = credential.accountInstanceId;\n    enterpriseUrl = (credential as GitHubCopilotCredentials).enterpriseUrl;\n  } else {\n    // This store republishes its registry but not the OAuth snapshot API, so the\n    // identity has to come from the registry. `getApiKey` may await a refresh and\n    // a rotation can land inside it, so bracket the fetch: only an id that held\n    // still names the account that produced this token.\n    const idBeforeToken = storage.getActiveAccount?.(COPILOT_PROVIDER_ID)?.id;\n    accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n    if (!accessToken) return [];\n    accountInstanceId = readStableAccountId(storage, idBeforeToken);\n    const stored = storage.get(COPILOT_PROVIDER_ID);\n    if (stored?.type === 'oauth') {\n      enterpriseUrl = (stored as GitHubCopilotCredentials).enterpriseUrl;\n    }\n    // The id is non-secret, and keying per account is what keeps entitlements\n    // (per account, per `github-copilot-catalog.test.ts`) from leaking across a\n    // rotation. Deriving the key from the token is what `cba11389e7` removed.\n  }\n  const baseUrl = getGitHubCopilotBaseUrl(accessToken, enterpriseUrl);\n  // No identity means the store cannot name the account it just served, so the\n  // TTL cache cannot be keyed per account — one entry would outlive the request\n  // and serve those models to every other account of the store. The in-flight\n  // map is no safer: two callers that resolved *different* accounts of an\n  // unnamed store would otherwise collide on one key and share whichever\n  // catalog was fetched first. So both caches are identified-only, and an\n  // unnamed store pays one `/models` request per call.\n  const credentialKey = accountInstanceId === undefined ? undefined : `${accountInstanceId}\\0${baseUrl}`;\n  const dedupeKey = credentialKey;\n\n  const now = Date.now();\n  const cached = credentialKey ? catalogCache.get(credentialKey) : undefined;\n  if (cached && now - cached.fetchedAt < cached.ttl) return cached.models;\n\n  const existingFetch = dedupeKey === undefined ? undefined : inflightFetches.get(dedupeKey);\n  if (existingFetch) return existingFetch;\n\n  const fetchPromise = (async (): Promise<CopilotModelEntry[]> => {\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n      try {\n        const models = await fetchCopilotModels({\n          baseUrl,\n          bearerToken: accessToken,\n          signal: controller.signal,\n        });\n        if (credentialKey) catalogCache.set(credentialKey, { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models });\n        return models;\n      } finally {\n        clearTimeout(timer);\n      }\n    } catch (error) {\n      if (credentialKey) {\n        catalogCache.set(credentialKey, {\n          fetchedAt: Date.now(),\n          ttl: CATALOG_FAILURE_TTL_MS,\n          models: COPILOT_FALLBACK_MODELS,\n        });\n      }\n      console.warn(\n        'Failed to fetch live GitHub Copilot models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return COPILOT_FALLBACK_MODELS;\n    } finally {\n      if (dedupeKey !== undefined) inflightFetches.delete(dedupeKey);\n    }\n  })();\n  if (dedupeKey !== undefined) inflightFetches.set(dedupeKey, fetchPromise);\n  return fetchPromise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAyBA,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;AAG9B,IAAI,sBAA0C;;AAG9C,SAAgB,iBAA8B;CAC5C,IAAI,CAAC,qBACH,sBAAsB,IAAI,YAAY;CAExC,OAAO;AACT;;AAGA,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;;;;;;AAOA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAM;CAEZ,MAAM,WAAW,IAAI;CACrB,IAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAAG;EAClD,MAAM,OAAO,SAAS,SAAS,SAAS;EACxC,IAAI,MAAM,QAAQ,KAAK,SAAS,QAAQ,OAAO;EAC/C,IAAI,MAAM,QAAQ,MAAM,OAAO,GAEP;OAAA,KAAK,QAAQ,MAChC,SAAkB,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS,aAE9E,GAAG,OAAO;EAAA;CAE9B;CAEA,MAAM,QAAQ,IAAI;CAClB,IAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;EAC5C,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,IAAI,MAAM,QAAQ,KAAK,SAAS,QAAQ,OAAO;CACjD;CAEA,OAAO;AACT;;AAGA,SAAS,eAAe,MAAwB;CAC9C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAM;CAEZ,MAAM,aAAa,SAA2B;EAC5C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;EAC9C,MAAM,IAAK,KAA2B;EACtC,OAAO,MAAM,WAAW,MAAM,eAAe,MAAM;CACrD;CAEA,MAAM,WAAW,IAAI;CACrB,IAAI,MAAM,QAAQ,QAAQ,GACxB,OAAO,SAAS,MACb,QACC,OACA,OAAO,QAAQ,YACf,MAAM,QAAS,IAA8B,OAAO,KAClD,IAA+B,QAAsB,KAAK,SAAS,CACzE;CAGF,MAAM,QAAQ,IAAI;CAClB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,MACV,SACC,QACA,OAAO,SAAS,YAChB,MAAM,QAAS,KAA+B,OAAO,KACnD,KAAgC,QAAsB,KAAK,SAAS,CAC1E;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,6BACd,OAAgE,CAAC,GACnD;CACd,QAAQ,OAAO,KAA6B,SAAuC;EACjF,MAAM,EAAE,SAAS,aAAa,GAAG,gBAAgB,QAAQ,CAAC;EAC1D,MAAM,UAAU,IAAI,QAAQ,KAAK,WAAW;EAC5C,MAAM,UAAU,KAAK,eAAe,eAAe;EACnD,QAAQ,OAAO;EAEf,MAAM,OAAO,QAAQ,IAAI,mBAAmB;EAC5C,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,0BAA0B,YAAY,qBAAqB;EAGnE,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,oBAAoB;GAC9B,aAAa,MAAM,QAAQ,mBAAmB,mBAAmB;GACjE,cAAc,YAAY;EAC5B,OAAO;GACL,cAAc,MAAM,QAAQ,UAAU,mBAAmB;GACzD,QAAQ,OAAO;GACf,MAAM,WAAW,QAAQ,IAAI,mBAAmB;GAChD,aAAa,UAAU,SAAS,UAAU;IAAE,GAAG;IAAU,QAAQ,eAAe,SAAS;GAAO,IAAI,KAAA;EACtG;EACA,IAAI,CAAC,eAAe,CAAC,YAAY,MAAM,0BAA0B,cAAc,qBAAqB;EACpG,MAAM,gBAAiB,WAAwC;EAE/D,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,MAAM,QAAQ,MAAM,CAAC,CAAC,KAAK;GACxC,aAAa,OAAO,KAAK,MAAM,IAAI,IAAI,KAAA;EACzC,QAAQ;GACN,aAAa,KAAA;EACf;EACA,MAAM,UAAU,cAAc,UAAU;EACxC,MAAM,WAAW,eAAe,UAAU;EAE1C,MAAM,UAAU,IAAI,QAAQ,eAAe,UAAU,IAAI,UAAU,KAAA,CAAS;EAC5E,IAAI,aAAa,IAAI,QAAQ,WAAW,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EACzF,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,aAAa;EACpD,QAAQ,IAAI,eAAe,UAAU,UAAU,MAAM;EACrD,QAAQ,IAAI,iBAAiB,oBAAoB;EACjD,IAAI,UACF,QAAQ,IAAI,0BAA0B,MAAM;EAE9C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,eAAe,GAEvD,IAAI,CAAC,QAAQ,IAAI,GAAG,GAClB,QAAQ,IAAI,KAAK,KAAK;EAI1B,MAAM,WACJ,KAAK,eAAe,QAAQ,qBAAqB,SAAS,aAAa,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;EAE7G,MAAM,OAAO,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAAS,KAAA,IAAY,QAAQ;EACzF,MAAM,eAAe,IAAI,QAAQ,UAAU;GACzC,QAAQ,QAAQ;GAChB;GACA;GACA,QAAQ,QAAQ;GAChB,UAAU,QAAQ;GAClB,WAAW,QAAQ;GACnB,GAAI,OAAQ,EAAE,QAAQ,OAAO,IAAoB,CAAC;EACpD,CAAC;EACD,IAAI;GACF,OAAO,MAAM,2BAA2B,MAAM,MAAM,YAAY,GAAG;IACjE,cAAc;IACd,YAAY,SAAS,SAAS;GAChC,CAAC;EACH,SAAS,OAAO;GACd,IAAI,SAAS,OAAO,UAAU,UAC5B,OAAO,OAAO,OAAkC,EAC9C,YAAY,SAAS,SAAS,EAChC,CAAC;GAEH,MAAM;EACR;CACF;AACF;AAEA,SAAS,qBAAqB,KAA6B,OAAe,kBAAgC;CACxG,MAAM,WAAW,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;CACxG,MAAM,OAAO,IAAI,IAAI,wBAAwB,OAAO,gBAAgB,CAAC;CAOrE,MAAM,WAAW,SAAS,SAAS,QAAQ,eAAe,GAAG;CAC7D,OAAO,IAAI,IAAI,GAAG,WAAW,SAAS,UAAU,IAAI;AACtD;AAEA,SAAS,cAAc,SAA0B;CAC/C,OAAO,QAAQ,WAAW,SAAS;AACrC;AAEA,SAAS,+BAA+B,SAAiB,OAAyB;CAChF,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO;CAGT,MAAM,cAAc,IAAI,wBAAwB;EAC9C,UAAU;EACV;EACA,2BAA2B;CAC7B,CAAC;CAED,OAAO,MAAM,KAAI,SAAQ;EACvB,IAAI,CAAC,QAAQ,OAAO,SAAS,YAAa,KAA4B,SAAS,YAC7E,OAAO;EAGT,MAAM,eAAe;EACrB,IAAI,CAAC,aAAa,aAChB,OAAO;EAGT,OAAO;GACL,GAAG;GACH,aAAa,iBAAiB;IAC5B,QAAQ,aAAa;IACrB,cAAc,CAAC,WAAW;IAC1B,MAAM;GACR,CAAC,CAAC,CAAC;EACL;CACF,CAAC;AACH;;AAGA,SAAS,wBAAwB,SAA0C;CACzE,OAAO;EACL,sBAAsB;EACtB,iBAAiB,OAAO,EAAE,aAAa;GACrC,IAAI,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,MAC7D,OAAO,OAAO;GAGhB,IAAI,cAAc,OAAO,GACvB,OAAgC,QAAQ,+BACtC,SACC,OAA+B,KAClC;GAGF,OAAO;EACT;CACF;AACF;;;;;;;;AASA,SAAgB,sBACd,UAAkB,WAClB,SACmB;CACnB,MAAM,UAAU,SAAS;CACzB,MAAM,UAAU,uBAAuB;EACrC,MAAM;EACN,SAAS;EACT,QAAQ,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAAS,iBAAiB;EACjF;EACA,OACE,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAC3C,KAAA,IACC,6BAA6B;GAAE,YAAY;GAAO,aAAa,SAAS;EAAY,CAAC;CAC9F,CAAC;CAED,OAAO,kBAAkB;EACvB,OAAO,QAAQ,UAAU,OAAO;EAChC,YAAY,CAAC,wBAAwB,OAAO,CAAC;CAC/C,CAAC;AACH;;;;;;;;AAaA,MAAM,0BAA+C,CACnD;CACE,IAAI;CACJ,MAAM;CACN,QAAQ;CACR,oBAAoB,CAAC,mBAAmB;CACxC,mBAAmB;CACnB,gBAAgB;CAChB,mBAAmB;AACrB,CACF;AAEA,MAAM,iBAAiB;AACvB,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AAQjC,MAAM,+BAAe,IAAI,IAA+B;AACxD,MAAM,kCAAkB,IAAI,IAA0C;;;;;;;;;;;;AAatE,SAAS,oBAAoB,SAA0B,eAAuD;CAC5G,MAAM,eAAe,QAAQ,mBAAmB,mBAAmB,CAAC,EAAE;CACtE,OAAO,kBAAkB,KAAA,KAAa,kBAAkB,eAAe,eAAe,KAAA;AACxF;;AAGA,SAAgB,2BAAiC;CAC/C,aAAa,MAAM;CACnB,gBAAgB,MAAM;AACxB;;;;;;;;;;;;;AAcA,eAAsB,uBACpB,OAA0C,CAAC,GACb;CAC9B,MAAM,UAAU,KAAK,eAAe,eAAe;CAOnD,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,QAAQ,oBAAoB;EAC9B,MAAM,aAAa,MAAM,QAAQ,mBAAmB,mBAAmB;EACvE,IAAI,CAAC,cAAc,WAAW,SAAS,SAAS,OAAO,CAAC;EACxD,cAAc,WAAW;EAMzB,oBAAoB,WAAW;EAC/B,gBAAiB,WAAwC;CAC3D,OAAO;EAKL,MAAM,gBAAgB,QAAQ,mBAAmB,mBAAmB,CAAC,EAAE;EACvE,cAAc,MAAM,QAAQ,UAAU,mBAAmB;EACzD,IAAI,CAAC,aAAa,OAAO,CAAC;EAC1B,oBAAoB,oBAAoB,SAAS,aAAa;EAC9D,MAAM,SAAS,QAAQ,IAAI,mBAAmB;EAC9C,IAAI,QAAQ,SAAS,SACnB,gBAAiB,OAAoC;CAKzD;CACA,MAAM,UAAU,wBAAwB,aAAa,aAAa;CAQlE,MAAM,gBAAgB,sBAAsB,KAAA,IAAY,KAAA,IAAY,GAAG,kBAAkB,IAAI;CAC7F,MAAM,YAAY;CAElB,MAAM,MAAM,KAAK,IAAI;CACrB,MAAM,SAAS,gBAAgB,aAAa,IAAI,aAAa,IAAI,KAAA;CACjE,IAAI,UAAU,MAAM,OAAO,YAAY,OAAO,KAAK,OAAO,OAAO;CAEjE,MAAM,gBAAgB,cAAc,KAAA,IAAY,KAAA,IAAY,gBAAgB,IAAI,SAAS;CACzF,IAAI,eAAe,OAAO;CAE1B,MAAM,gBAAgB,YAA0C;EAC9D,IAAI;GACF,MAAM,aAAa,IAAI,gBAAgB;GACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,wBAAwB;GAC3E,IAAI;IACF,MAAM,SAAS,MAAM,mBAAmB;KACtC;KACA,aAAa;KACb,QAAQ,WAAW;IACrB,CAAC;IACD,IAAI,eAAe,aAAa,IAAI,eAAe;KAAE,WAAW,KAAK,IAAI;KAAG,KAAK;KAAgB;IAAO,CAAC;IACzG,OAAO;GACT,UAAU;IACR,aAAa,KAAK;GACpB;EACF,SAAS,OAAO;GACd,IAAI,eACF,aAAa,IAAI,eAAe;IAC9B,WAAW,KAAK,IAAI;IACpB,KAAK;IACL,QAAQ;GACV,CAAC;GAEH,QAAQ,KACN,oEACA,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;GACA,OAAO;EACT,UAAU;GACR,IAAI,cAAc,KAAA,GAAW,gBAAgB,OAAO,SAAS;EAC/D;CACF,EAAA,CAAG;CACH,IAAI,cAAc,KAAA,GAAW,gBAAgB,IAAI,WAAW,YAAY;CACxE,OAAO;AACT"}

package/dist/providers/google-thinking.js

@@ -1,4 +1,4 @@
-//#region src/providers/google-thinking.ts
+// src/providers/google-thinking.ts
 const GEMINI_25_BUDGETS = {
 	low: 1024,
 	medium: 8192,
@@ -61,7 +61,6 @@ function createGoogleThinkingMiddleware(modelId, level) {
 		}
 	};
 }
-//#endregion
 export { createGoogleThinkingMiddleware, resolveGoogleThinkingConfig, runGeminiThinkingLevel };
 
 //# sourceMappingURL=google-thinking.js.map

package/dist/providers/kimi-coding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kimi-coding.d.ts","sourceRoot":"","sources":["../../src/providers/kimi-coding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AASzE,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,wBAAgB,yBAAyB,CAAC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAuC3G;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,KAAK,CASvE;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAA;CAAE,GAC/F,iBAAiB,CAYnB"}
+{"version":3,"file":"kimi-coding.d.ts","sourceRoot":"","sources":["../../src/providers/kimi-coding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AAWzE,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,wBAAgB,yBAAyB,CAAC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAuC3G;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,KAAK,CASvE;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAA;CAAE,GAC/F,iBAAiB,CAYnB"}

package/dist/providers/kimi-coding.js

@@ -2,8 +2,10 @@ import { getKimiCodingDeviceHeaders, isKimiCodingDeviceId } from "../auth/provid
 import { AuthStorage } from "../auth/storage.js";
 import { ProviderAuthRequiredError, rejectUnauthorizedResponse } from "../auth/provider-auth-error.js";
 import { createAnthropic } from "@ai-sdk/anthropic";
-//#region src/providers/kimi-coding.ts
+// src/providers/kimi-coding.ts
 const PROVIDER_ID = "kimi-for-coding";
+const PROVIDER_NAME = "Kimi For Coding";
+const INVALID_CREDENTIALS_MESSAGE = `${PROVIDER_NAME} credentials are invalid. Please reconnect the account.`;
 const BASE_URL = "https://api.kimi.com/coding/v1";
 let authStorageInstance = null;
 function setAuthStorage(storage) {
@@ -18,8 +20,8 @@ function buildKimiCodingOAuthFetch(options = {}) {
 		const store = options.credentialStore ?? getAuthStorage();
 		store.reload();
 		const credential = store.get(PROVIDER_ID);
-		if (!credential || credential.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to Kimi For Coding.");
-		if (!isKimiCodingDeviceId(credential.deviceId)) throw new ProviderAuthRequiredError("Kimi For Coding credentials are invalid. Please reconnect the account.");
+		if (!credential || credential.type !== "oauth") throw ProviderAuthRequiredError.notSignedIn(PROVIDER_NAME);
+		if (!isKimiCodingDeviceId(credential.deviceId)) throw new ProviderAuthRequiredError(INVALID_CREDENTIALS_MESSAGE);
 		let token;
 		let activeCredential = credential;
 		if (store.getOAuthCredential) {
@@ -34,8 +36,8 @@ function buildKimiCodingOAuthFetch(options = {}) {
 				access: token ?? reloaded.access
 			} : void 0;
 		}
-		if (!token) throw new ProviderAuthRequiredError("Failed to refresh the Kimi For Coding token.");
-		if (!activeCredential || !isKimiCodingDeviceId(activeCredential.deviceId)) throw new ProviderAuthRequiredError("Kimi For Coding credentials are invalid. Please reconnect the account.");
+		if (!token) throw ProviderAuthRequiredError.signInExpired(PROVIDER_NAME);
+		if (!activeCredential || !isKimiCodingDeviceId(activeCredential.deviceId)) throw new ProviderAuthRequiredError(INVALID_CREDENTIALS_MESSAGE);
 		const deviceHeaders = getKimiCodingDeviceHeaders(activeCredential.deviceId);
 		const headers = new Headers(input instanceof Request ? input.headers : void 0);
 		if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));
@@ -47,7 +49,7 @@ function buildKimiCodingOAuthFetch(options = {}) {
 			...init,
 			headers
 		}), {
-			providerName: "Kimi For Coding",
+			providerName: PROVIDER_NAME,
 			requestUrl: input instanceof URL ? input.toString() : typeof input === "string" ? input : input.url
 		});
 	});
@@ -75,7 +77,6 @@ function kimiCodingProvider(modelId, options) {
 		fetch: usesOAuth ? buildKimiCodingOAuthFetch({ credentialStore: options.credentialStore }) : buildKimiCodingApiKeyFetch(options.apiKey)
 	})(modelId);
 }
-//#endregion
 export { buildKimiCodingApiKeyFetch, buildKimiCodingOAuthFetch, kimiCodingProvider, setAuthStorage };
 
 //# sourceMappingURL=kimi-coding.js.map

package/dist/providers/kimi-coding.js.map

@@ -1 +1 @@
-{"version":3,"file":"kimi-coding.js","names":[],"sources":["../../src/providers/kimi-coding.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { ProviderAuthRequiredError, rejectUnauthorizedResponse } from '../auth/provider-auth-error.js';\nimport { getKimiCodingDeviceHeaders, isKimiCodingDeviceId } from '../auth/providers/kimi-coding.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore, OAuthCredential } from '../auth/types.js';\n\nconst PROVIDER_ID = 'kimi-for-coding';\n// Pi's provider root is https://api.kimi.com/coding. The AI SDK expects the\n// versioned Anthropic base URL and appends /messages itself.\nconst BASE_URL = 'https://api.kimi.com/coding/v1';\n\nlet authStorageInstance: AuthStorage | null = null;\n\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\nfunction getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) authStorageInstance = new AuthStorage();\n  return authStorageInstance;\n}\n\nexport function buildKimiCodingOAuthFetch(options: { credentialStore?: CredentialStore } = {}): typeof fetch {\n  return (async (input: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const store = options.credentialStore ?? getAuthStorage();\n    store.reload();\n    const credential = store.get(PROVIDER_ID);\n    if (!credential || credential.type !== 'oauth') {\n      throw new ProviderAuthRequiredError('Not logged in to Kimi For Coding.');\n    }\n    if (!isKimiCodingDeviceId(credential.deviceId)) {\n      throw new ProviderAuthRequiredError('Kimi For Coding credentials are invalid. Please reconnect the account.');\n    }\n    let token: string | undefined;\n    let activeCredential: OAuthCredential | undefined = credential;\n    if (store.getOAuthCredential) {\n      activeCredential = await store.getOAuthCredential(PROVIDER_ID);\n      token = activeCredential?.access;\n    } else {\n      token = await store.getApiKey(PROVIDER_ID);\n      store.reload();\n      const reloaded = store.get(PROVIDER_ID);\n      activeCredential = reloaded?.type === 'oauth' ? { ...reloaded, access: token ?? reloaded.access } : undefined;\n    }\n    if (!token) throw new ProviderAuthRequiredError('Failed to refresh the Kimi For Coding token.');\n    if (!activeCredential || !isKimiCodingDeviceId(activeCredential.deviceId)) {\n      throw new ProviderAuthRequiredError('Kimi For Coding credentials are invalid. Please reconnect the account.');\n    }\n    const deviceHeaders = getKimiCodingDeviceHeaders(activeCredential.deviceId);\n\n    const headers = new Headers(input instanceof Request ? input.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    for (const [key, value] of Object.entries(deviceHeaders)) headers.set(key, value);\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${token}`);\n    return rejectUnauthorizedResponse(await fetch(input, { ...init, headers }), {\n      providerName: 'Kimi For Coding',\n      requestUrl: input instanceof URL ? input.toString() : typeof input === 'string' ? input : input.url,\n    });\n  }) as typeof fetch;\n}\n\nexport function buildKimiCodingApiKeyFetch(apiKey: string): typeof fetch {\n  return (async (input: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const headers = new Headers(input instanceof Request ? input.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${apiKey}`);\n    return fetch(input, { ...init, headers });\n  }) as typeof fetch;\n}\n\nexport function kimiCodingProvider(\n  modelId: string,\n  options: { apiKey: string; headers?: Record<string, string>; credentialStore?: CredentialStore },\n): MastraModelConfig {\n  const usesOAuth = options.credentialStore?.get(PROVIDER_ID)?.type === 'oauth';\n  const provider = createAnthropic({\n    name: PROVIDER_ID,\n    apiKey: 'auth-placeholder',\n    baseURL: BASE_URL,\n    headers: options.headers,\n    fetch: usesOAuth\n      ? (buildKimiCodingOAuthFetch({ credentialStore: options.credentialStore }) as any)\n      : (buildKimiCodingApiKeyFetch(options.apiKey) as any),\n  });\n  return provider(modelId) as unknown as MastraModelConfig;\n}\n"],"mappings":";;;;;AAOA,MAAM,cAAc;AAGpB,MAAM,WAAW;AAEjB,IAAI,sBAA0C;AAE9C,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;AAEA,SAAS,iBAA8B;CACrC,IAAI,CAAC,qBAAqB,sBAAsB,IAAI,YAAY;CAChE,OAAO;AACT;AAEA,SAAgB,0BAA0B,UAAiD,CAAC,GAAiB;CAC3G,QAAQ,OAAO,OAA+B,SAAuC;EACnF,MAAM,QAAQ,QAAQ,mBAAmB,eAAe;EACxD,MAAM,OAAO;EACb,MAAM,aAAa,MAAM,IAAI,WAAW;EACxC,IAAI,CAAC,cAAc,WAAW,SAAS,SACrC,MAAM,IAAI,0BAA0B,mCAAmC;EAEzE,IAAI,CAAC,qBAAqB,WAAW,QAAQ,GAC3C,MAAM,IAAI,0BAA0B,wEAAwE;EAE9G,IAAI;EACJ,IAAI,mBAAgD;EACpD,IAAI,MAAM,oBAAoB;GAC5B,mBAAmB,MAAM,MAAM,mBAAmB,WAAW;GAC7D,QAAQ,kBAAkB;EAC5B,OAAO;GACL,QAAQ,MAAM,MAAM,UAAU,WAAW;GACzC,MAAM,OAAO;GACb,MAAM,WAAW,MAAM,IAAI,WAAW;GACtC,mBAAmB,UAAU,SAAS,UAAU;IAAE,GAAG;IAAU,QAAQ,SAAS,SAAS;GAAO,IAAI,KAAA;EACtG;EACA,IAAI,CAAC,OAAO,MAAM,IAAI,0BAA0B,8CAA8C;EAC9F,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,iBAAiB,QAAQ,GACtE,MAAM,IAAI,0BAA0B,wEAAwE;EAE9G,MAAM,gBAAgB,2BAA2B,iBAAiB,QAAQ;EAE1E,MAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,KAAA,CAAS;EAChF,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,GAAG,QAAQ,IAAI,KAAK,KAAK;EAChF,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,OAAO;EAC9C,OAAO,2BAA2B,MAAM,MAAM,OAAO;GAAE,GAAG;GAAM;EAAQ,CAAC,GAAG;GAC1E,cAAc;GACd,YAAY,iBAAiB,MAAM,MAAM,SAAS,IAAI,OAAO,UAAU,WAAW,QAAQ,MAAM;EAClG,CAAC;CACH;AACF;AAEA,SAAgB,2BAA2B,QAA8B;CACvE,QAAQ,OAAO,OAA+B,SAAuC;EACnF,MAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,KAAA,CAAS;EAChF,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;EAC/C,OAAO,MAAM,OAAO;GAAE,GAAG;GAAM;EAAQ,CAAC;CAC1C;AACF;AAEA,SAAgB,mBACd,SACA,SACmB;CACnB,MAAM,YAAY,QAAQ,iBAAiB,IAAI,WAAW,CAAC,EAAE,SAAS;CAUtE,OATiB,gBAAgB;EAC/B,MAAM;EACN,QAAQ;EACR,SAAS;EACT,SAAS,QAAQ;EACjB,OAAO,YACF,0BAA0B,EAAE,iBAAiB,QAAQ,gBAAgB,CAAC,IACtE,2BAA2B,QAAQ,MAAM;CAChD,CACc,CAAC,CAAC,OAAO;AACzB"}
+{"version":3,"file":"kimi-coding.js","names":[],"sources":["../../src/providers/kimi-coding.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { ProviderAuthRequiredError, rejectUnauthorizedResponse } from '../auth/provider-auth-error.js';\nimport { getKimiCodingDeviceHeaders, isKimiCodingDeviceId } from '../auth/providers/kimi-coding.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore, OAuthCredential } from '../auth/types.js';\n\nconst PROVIDER_ID = 'kimi-for-coding';\nconst PROVIDER_NAME = 'Kimi For Coding';\nconst INVALID_CREDENTIALS_MESSAGE = `${PROVIDER_NAME} credentials are invalid. Please reconnect the account.`;\n// Pi's provider root is https://api.kimi.com/coding. The AI SDK expects the\n// versioned Anthropic base URL and appends /messages itself.\nconst BASE_URL = 'https://api.kimi.com/coding/v1';\n\nlet authStorageInstance: AuthStorage | null = null;\n\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\nfunction getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) authStorageInstance = new AuthStorage();\n  return authStorageInstance;\n}\n\nexport function buildKimiCodingOAuthFetch(options: { credentialStore?: CredentialStore } = {}): typeof fetch {\n  return (async (input: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const store = options.credentialStore ?? getAuthStorage();\n    store.reload();\n    const credential = store.get(PROVIDER_ID);\n    if (!credential || credential.type !== 'oauth') {\n      throw ProviderAuthRequiredError.notSignedIn(PROVIDER_NAME);\n    }\n    if (!isKimiCodingDeviceId(credential.deviceId)) {\n      throw new ProviderAuthRequiredError(INVALID_CREDENTIALS_MESSAGE);\n    }\n    let token: string | undefined;\n    let activeCredential: OAuthCredential | undefined = credential;\n    if (store.getOAuthCredential) {\n      activeCredential = await store.getOAuthCredential(PROVIDER_ID);\n      token = activeCredential?.access;\n    } else {\n      token = await store.getApiKey(PROVIDER_ID);\n      store.reload();\n      const reloaded = store.get(PROVIDER_ID);\n      activeCredential = reloaded?.type === 'oauth' ? { ...reloaded, access: token ?? reloaded.access } : undefined;\n    }\n    if (!token) throw ProviderAuthRequiredError.signInExpired(PROVIDER_NAME);\n    if (!activeCredential || !isKimiCodingDeviceId(activeCredential.deviceId)) {\n      throw new ProviderAuthRequiredError(INVALID_CREDENTIALS_MESSAGE);\n    }\n    const deviceHeaders = getKimiCodingDeviceHeaders(activeCredential.deviceId);\n\n    const headers = new Headers(input instanceof Request ? input.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    for (const [key, value] of Object.entries(deviceHeaders)) headers.set(key, value);\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${token}`);\n    return rejectUnauthorizedResponse(await fetch(input, { ...init, headers }), {\n      providerName: PROVIDER_NAME,\n      requestUrl: input instanceof URL ? input.toString() : typeof input === 'string' ? input : input.url,\n    });\n  }) as typeof fetch;\n}\n\nexport function buildKimiCodingApiKeyFetch(apiKey: string): typeof fetch {\n  return (async (input: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const headers = new Headers(input instanceof Request ? input.headers : undefined);\n    if (init?.headers) new Headers(init.headers).forEach((value, key) => headers.set(key, value));\n    headers.delete('authorization');\n    headers.delete('x-api-key');\n    headers.set('Authorization', `Bearer ${apiKey}`);\n    return fetch(input, { ...init, headers });\n  }) as typeof fetch;\n}\n\nexport function kimiCodingProvider(\n  modelId: string,\n  options: { apiKey: string; headers?: Record<string, string>; credentialStore?: CredentialStore },\n): MastraModelConfig {\n  const usesOAuth = options.credentialStore?.get(PROVIDER_ID)?.type === 'oauth';\n  const provider = createAnthropic({\n    name: PROVIDER_ID,\n    apiKey: 'auth-placeholder',\n    baseURL: BASE_URL,\n    headers: options.headers,\n    fetch: usesOAuth\n      ? (buildKimiCodingOAuthFetch({ credentialStore: options.credentialStore }) as any)\n      : (buildKimiCodingApiKeyFetch(options.apiKey) as any),\n  });\n  return provider(modelId) as unknown as MastraModelConfig;\n}\n"],"mappings":";;;;;AAOA,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,8BAA8B,GAAG,cAAc;AAGrD,MAAM,WAAW;AAEjB,IAAI,sBAA0C;AAE9C,SAAgB,eAAe,SAAwC;CACrE,sBAAsB,WAAW;AACnC;AAEA,SAAS,iBAA8B;CACrC,IAAI,CAAC,qBAAqB,sBAAsB,IAAI,YAAY;CAChE,OAAO;AACT;AAEA,SAAgB,0BAA0B,UAAiD,CAAC,GAAiB;CAC3G,QAAQ,OAAO,OAA+B,SAAuC;EACnF,MAAM,QAAQ,QAAQ,mBAAmB,eAAe;EACxD,MAAM,OAAO;EACb,MAAM,aAAa,MAAM,IAAI,WAAW;EACxC,IAAI,CAAC,cAAc,WAAW,SAAS,SACrC,MAAM,0BAA0B,YAAY,aAAa;EAE3D,IAAI,CAAC,qBAAqB,WAAW,QAAQ,GAC3C,MAAM,IAAI,0BAA0B,2BAA2B;EAEjE,IAAI;EACJ,IAAI,mBAAgD;EACpD,IAAI,MAAM,oBAAoB;GAC5B,mBAAmB,MAAM,MAAM,mBAAmB,WAAW;GAC7D,QAAQ,kBAAkB;EAC5B,OAAO;GACL,QAAQ,MAAM,MAAM,UAAU,WAAW;GACzC,MAAM,OAAO;GACb,MAAM,WAAW,MAAM,IAAI,WAAW;GACtC,mBAAmB,UAAU,SAAS,UAAU;IAAE,GAAG;IAAU,QAAQ,SAAS,SAAS;GAAO,IAAI,KAAA;EACtG;EACA,IAAI,CAAC,OAAO,MAAM,0BAA0B,cAAc,aAAa;EACvE,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,iBAAiB,QAAQ,GACtE,MAAM,IAAI,0BAA0B,2BAA2B;EAEjE,MAAM,gBAAgB,2BAA2B,iBAAiB,QAAQ;EAE1E,MAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,KAAA,CAAS;EAChF,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,GAAG,QAAQ,IAAI,KAAK,KAAK;EAChF,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,OAAO;EAC9C,OAAO,2BAA2B,MAAM,MAAM,OAAO;GAAE,GAAG;GAAM;EAAQ,CAAC,GAAG;GAC1E,cAAc;GACd,YAAY,iBAAiB,MAAM,MAAM,SAAS,IAAI,OAAO,UAAU,WAAW,QAAQ,MAAM;EAClG,CAAC;CACH;AACF;AAEA,SAAgB,2BAA2B,QAA8B;CACvE,QAAQ,OAAO,OAA+B,SAAuC;EACnF,MAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,KAAA,CAAS;EAChF,IAAI,MAAM,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;EAC5F,QAAQ,OAAO,eAAe;EAC9B,QAAQ,OAAO,WAAW;EAC1B,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;EAC/C,OAAO,MAAM,OAAO;GAAE,GAAG;GAAM;EAAQ,CAAC;CAC1C;AACF;AAEA,SAAgB,mBACd,SACA,SACmB;CACnB,MAAM,YAAY,QAAQ,iBAAiB,IAAI,WAAW,CAAC,EAAE,SAAS;CAUtE,OATiB,gBAAgB;EAC/B,MAAM;EACN,QAAQ;EACR,SAAS;EACT,SAAS,QAAQ;EACjB,OAAO,YACF,0BAA0B,EAAE,iBAAiB,QAAQ,gBAAgB,CAAC,IACtE,2BAA2B,QAAQ,MAAM;CAChD,CACc,CAAC,CAAC,OAAO;AACzB"}

package/dist/providers/model-ids.js

@@ -1,4 +1,4 @@
-//#region src/providers/model-ids.ts
+// src/providers/model-ids.ts
 /**
 * Model-id helpers shared by the model gateway and the browser settings
 * module. Kept dependency-free so neither side has to import the other.
@@ -75,7 +75,6 @@ function remapOpenAIModelForCodexOAuth(modelId) {
 	const remappedModelId = `${OPENAI_PREFIX}${codexModelId}`;
 	return modelId.startsWith("mastra/") ? `${MASTRA_GATEWAY_PREFIX}${remappedModelId}` : remappedModelId;
 }
-//#endregion
 export { ANTHROPIC_PREFIX, KIMI_CODING_CREDENTIAL_ID, KIMI_CODING_PROVIDER_ID, MASTRA_GATEWAY_PREFIX, OPENAI_PREFIX, getCredentialProviderId, normalizeAnthropicModelId, normalizeLegacyModelId, normalizeLegacyProviderId, remapOpenAIModelForCodexOAuth, stripMastraGatewayPrefix };
 
 //# sourceMappingURL=model-ids.js.map

package/dist/providers/openai-codex.d.ts

@@ -28,6 +28,21 @@ export declare const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, s
  * Create Codex middleware with the given reasoning effort level.
  */
 export declare function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware;
+/**
+ * The thread a model request belongs to, from the `x-thread-id` header that
+ * model resolution adds for requests made inside a thread.
+ */
+export declare function getRequestThreadId(headers?: Record<string, string>): string | undefined;
+/**
+ * Create middleware that sends `prompt_cache_key` on OpenAI Responses requests.
+ *
+ * OpenAI routes a cached prompt by a hash of its start plus this key. Every
+ * Mastra Code prompt starts with the same system prompt, so without a key all
+ * threads compete for the same cache slot and consecutive steps of one run often
+ * land on a machine that doesn't hold their prefix. Keying by thread keeps each
+ * thread's requests together. A key the caller already set wins.
+ */
+export declare function createPromptCacheKeyMiddleware(promptCacheKey?: string): LanguageModelMiddleware | undefined;
 /**
  * Create middleware that forwards a resolved reasoning effort to an
  * OpenAI-compatible provider as `providerOptions[providerKey].reasoningEffort`.

package/dist/providers/openai-codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../src/providers/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAU5D;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAIjD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAI9F;AAKD,eAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAOxF,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4BvF;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE,MAAM,GACvB,uBAAuB,GAAG,SAAS,CAgBrC;AA2CD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAqDd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,KAAK,CAuC/E;AAwID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC3G,iBAAiB,CAmCnB"}
+{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../src/providers/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAW5D;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAIjD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAI9F;AAKD,eAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAOxF,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4BvF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAMvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAgB3G;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE,MAAM,GACvB,uBAAuB,GAAG,SAAS,CAgBrC;AAyCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CA2Dd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,KAAK,CAuC/E;AAwID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC3G,iBAAiB,CAuCnB"}

package/dist/providers/openai-codex.js

@@ -4,7 +4,7 @@ import { runCatalogThinkingLevel } from "../thinking-catalog.js";
 import { ProviderAuthRequiredError, rejectUnauthorizedResponse } from "../auth/provider-auth-error.js";
 import { createOpenAI } from "@ai-sdk/openai";
 import { wrapLanguageModel } from "ai";
-//#region src/providers/openai-codex.ts
+// src/providers/openai-codex.ts
 /**
 * OpenAI Codex OAuth Provider
 *
@@ -17,6 +17,7 @@ import { wrapLanguageModel } from "ai";
 const CODEX_API_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
 const CODEX_ORIGINATOR = "mastracode";
 const CODEX_USER_AGENT = "mastracode";
+const CODEX_PROVIDER_NAME = "OpenAI Codex";
 let authStorageInstance = null;
 /**
 * Get or create the shared AuthStorage instance
@@ -69,6 +70,39 @@ function createCodexMiddleware(reasoningEffort) {
 	};
 }
 /**
+* The thread a model request belongs to, from the `x-thread-id` header that
+* model resolution adds for requests made inside a thread.
+*/
+function getRequestThreadId(headers) {
+	if (!headers) return void 0;
+	for (const name in headers) if (name.toLowerCase() === "x-thread-id") return headers[name] || void 0;
+}
+/**
+* Create middleware that sends `prompt_cache_key` on OpenAI Responses requests.
+*
+* OpenAI routes a cached prompt by a hash of its start plus this key. Every
+* Mastra Code prompt starts with the same system prompt, so without a key all
+* threads compete for the same cache slot and consecutive steps of one run often
+* land on a machine that doesn't hold their prefix. Keying by thread keeps each
+* thread's requests together. A key the caller already set wins.
+*/
+function createPromptCacheKeyMiddleware(promptCacheKey) {
+	if (!promptCacheKey) return void 0;
+	return {
+		specificationVersion: "v3",
+		transformParams: async ({ params }) => {
+			params.providerOptions = {
+				...params.providerOptions,
+				openai: {
+					promptCacheKey,
+					...params.providerOptions?.openai ?? {}
+				}
+			};
+			return params;
+		}
+	};
+}
+/**
 * Create middleware that forwards a resolved reasoning effort to an
 * OpenAI-compatible provider as `providerOptions[providerKey].reasoningEffort`.
 *
@@ -109,16 +143,16 @@ async function getCodexBearer(authStorage) {
 	const storage = authStorage ?? getAuthStorage();
 	storage.reload();
 	let cred = storage.get("openai-codex");
-	if (!cred || cred.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to OpenAI Codex.");
+	if (!cred || cred.type !== "oauth") throw ProviderAuthRequiredError.notSignedIn(CODEX_PROVIDER_NAME);
 	if (storage.getOAuthCredential) {
 		cred = await storage.getOAuthCredential("openai-codex");
-		if (!cred) throw new ProviderAuthRequiredError("Failed to refresh the OpenAI Codex token.");
+		if (!cred) throw ProviderAuthRequiredError.signInExpired(CODEX_PROVIDER_NAME);
 	} else if (Date.now() >= cred.expires) {
 		const refreshedToken = await storage.getApiKey("openai-codex");
-		if (!refreshedToken) throw new ProviderAuthRequiredError("Failed to refresh the OpenAI Codex token.");
+		if (!refreshedToken) throw ProviderAuthRequiredError.signInExpired(CODEX_PROVIDER_NAME);
 		storage.reload();
 		const reloaded = storage.get("openai-codex");
-		if (!reloaded || reloaded.type !== "oauth") throw new ProviderAuthRequiredError("Not logged in to OpenAI Codex.");
+		if (!reloaded || reloaded.type !== "oauth") throw ProviderAuthRequiredError.notSignedIn(CODEX_PROVIDER_NAME);
 		cred = {
 			...reloaded,
 			access: refreshedToken
@@ -149,6 +183,11 @@ function buildOpenAICodexOAuthFetch(opts = {}) {
 		if (!headers.has("originator")) headers.set("originator", CODEX_ORIGINATOR);
 		if (!headers.has("User-Agent")) headers.set("User-Agent", CODEX_USER_AGENT);
 		if (accountId) headers.set("ChatGPT-Account-ID", accountId);
+		const threadId = headers.get("x-thread-id");
+		if (threadId) {
+			if (!headers.has("session-id")) headers.set("session-id", threadId);
+			if (!headers.has("thread-id")) headers.set("thread-id", threadId);
+		}
 		const parsed = new URL(request.url);
 		const finalUrl = opts.rewriteUrl !== false && (parsed.pathname.includes("/v1/responses") || parsed.pathname.includes("/chat/completions")) ? new URL(CODEX_API_ENDPOINT) : parsed;
 		const body = request.method === "GET" || request.method === "HEAD" ? void 0 : request.body;
@@ -163,7 +202,7 @@ function buildOpenAICodexOAuthFetch(opts = {}) {
 		});
 		try {
 			return await rejectUnauthorizedResponse(await fetch(finalRequest), {
-				providerName: "OpenAI Codex",
+				providerName: CODEX_PROVIDER_NAME,
 				requestUrl: finalUrl.toString()
 			});
 		} catch (error) {
@@ -322,8 +361,9 @@ async function aggregateCodexStream(response) {
 function openaiCodexProvider(modelId = "codex-mini-latest", options) {
 	const effectiveLevel = getEffectiveThinkingLevel(modelId, options?.thinkingLevel ?? "medium");
 	const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];
-	const middleware = createCodexMiddleware(reasoningEffort);
 	const headers = options?.headers;
+	const promptCacheKeyMiddleware = createPromptCacheKeyMiddleware(getRequestThreadId(headers));
+	const middleware = [createCodexMiddleware(reasoningEffort), ...promptCacheKeyMiddleware ? [promptCacheKeyMiddleware] : []];
 	const baseURL = process.env.OPENAI_BASE_URL;
 	if (process.env.NODE_ENV === "test" || process.env.VITEST) {
 		const openai = createOpenAI({
@@ -333,7 +373,7 @@ function openaiCodexProvider(modelId = "codex-mini-latest", options) {
 		});
 		return wrapLanguageModel({
 			model: openai.responses(modelId),
-			middleware: [middleware]
+			middleware
 		});
 	}
 	const openai = createOpenAI({
@@ -344,10 +384,9 @@ function openaiCodexProvider(modelId = "codex-mini-latest", options) {
 	});
 	return wrapLanguageModel({
 		model: openai.responses(modelId),
-		middleware: [middleware]
+		middleware
 	});
 }
-//#endregion
-export { THINKING_LEVEL_TO_REASONING_EFFORT, buildCodexStagehandFetch, buildOpenAICodexOAuthFetch, createCodexMiddleware, createReasoningEffortMiddleware, getAuthStorage, getEffectiveThinkingLevel, openaiCodexProvider, setAuthStorage, supportsMaxReasoningEffort };
+export { THINKING_LEVEL_TO_REASONING_EFFORT, buildCodexStagehandFetch, buildOpenAICodexOAuthFetch, createCodexMiddleware, createPromptCacheKeyMiddleware, createReasoningEffortMiddleware, getAuthStorage, getEffectiveThinkingLevel, getRequestThreadId, openaiCodexProvider, setAuthStorage, supportsMaxReasoningEffort };
 
 //# sourceMappingURL=openai-codex.js.map