@mastra/code-sdk 1.2.0-alpha.14 → 1.2.0-alpha.15

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @mastra/code-sdk
 
+## 1.2.0-alpha.15
+
+### Patch Changes
+
+- Fixed authentication failures for unprefixed direct-provider models by using provider environment credentials when no provider-specific stored credential exists. ([#21197](https://github.com/mastra-ai/mastra/pull/21197))
+
+- Updated dependencies [[`9571e3a`](https://github.com/mastra-ai/mastra/commit/9571e3a06ed2c5220196460bf82a2129255c3a8b), [`d6c56f9`](https://github.com/mastra-ai/mastra/commit/d6c56f951db3213330b98b0abafa9778c8770e58), [`9571e3a`](https://github.com/mastra-ai/mastra/commit/9571e3a06ed2c5220196460bf82a2129255c3a8b), [`acc3513`](https://github.com/mastra-ai/mastra/commit/acc3513b19f79bf0a7ec2998694580edca54086c), [`94e7ae9`](https://github.com/mastra-ai/mastra/commit/94e7ae970b37c888cd1244ef013292639a2fe6d1), [`6a667b4`](https://github.com/mastra-ai/mastra/commit/6a667b4b7cd6a93fe41fcdd357b08c5a8c09b9ab), [`2440e09`](https://github.com/mastra-ai/mastra/commit/2440e096ea6c2def1ccc1eb2d0f3f5b88c4af940), [`a59049b`](https://github.com/mastra-ai/mastra/commit/a59049b1652a13efff66ac826326b5ed9a550342)]:
+  - @mastra/core@1.58.0-alpha.13
+
 ## 1.2.0-alpha.14
 
 ### Patch Changes

package/dist/agents/model.js

@@ -85,7 +85,7 @@ function resolveModel(modelId, options) {
 	return gateway.resolveLanguageModel({
 		providerId,
 		modelId: bareModelId,
-		apiKey: auth?.apiKey ?? mgApiKey ?? "",
+		apiKey: auth?.apiKey ?? "",
 		headers
 	});
 }

package/dist/agents/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","names":[],"sources":["../../src/agents/model.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { GatewayLanguageModel, MastraModelGatewayInterface } from '@mastra/core/llm';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport {\n  loadSettings,\n  resolveDefaultThinkingLevel,\n  stripMastraCodeCustomProviderPrefix,\n} from '../onboarding/settings.js';\nimport { AMAZON_BEDROCK_GATEWAY_ID, createAmazonBedrockGateway } from '../providers/amazon-bedrock-gateway.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { resolveCredentialStore } from './credential-resolver.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\nimport {\n  MASTRA_GATEWAY_PREFIX,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  reloadAuthStorage,\n  stripMastraGatewayPrefix,\n} from './mastracode-gateway.js';\nimport type { MastraCodeGatewayOptions } from './mastracode-gateway.js';\n\nexport {\n  getAnthropicApiKey,\n  getOpenAIApiKey,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  remapOpenAIModelForCodexOAuth,\n  resolveAuth,\n} from './mastracode-gateway.js';\nexport type { MastraCodeCustomProvider, MastraCodeGatewayOptions } from './mastracode-gateway.js';\nexport {\n  setCredentialStoreProvider,\n  hasCredentialStoreProvider,\n  resolveTenantFromRequestContext,\n} from './credential-resolver.js';\nexport type { CredentialTenant, CredentialStoreProvider } from './credential-resolver.js';\nexport {\n  setCustomProvidersSource,\n  hasCustomProvidersSource,\n  resolveCustomProviders,\n} from './custom-provider-source.js';\nexport type { CustomProvidersSource } from './custom-provider-source.js';\n\ntype ResolvedModel = GatewayLanguageModel;\ntype ModelRequestHeaders = Record<string, string>;\n\nfunction getAgentControllerHeaders(requestContext?: RequestContext): ModelRequestHeaders | undefined {\n  const agentControllerContext = requestContext?.get('controller') as AgentControllerRequestContext<any> | undefined;\n  const headers = {\n    ...(agentControllerContext?.threadId ? { 'x-thread-id': agentControllerContext.threadId } : {}),\n    ...(agentControllerContext?.resourceId ? { 'x-resource-id': agentControllerContext.resourceId } : {}),\n  };\n\n  return Object.keys(headers).length > 0 ? headers : undefined;\n}\n\nexport function createMastraCodeGateway(options: MastraCodeGatewayOptions): MastraCodeGateway {\n  return new MastraCodeGateway(options);\n}\n\nexport function createMastraCodeModelCatalogProvider(gateway: MastraModelGatewayInterface) {\n  return gateway instanceof MastraCodeGateway\n    ? gateway.createModelCatalogProvider()\n    : MastraCodeGateway.createModelCatalogProvider(gateway);\n}\n\n/**\n * Placeholder for future model ID normalization.\n * Currently returns the input unchanged, but exists as a seam\n * for aliasing, casing fixes, or validation in the future.\n */\nexport function resolveModelId(modelId: string): string {\n  return modelId;\n}\n\n/**\n * Resolve a model ID to the correct provider instance.\n * Shared by the main agent, observer, and reflector.\n *\n * - For anthropic/* models: Uses stored OAuth credentials when present, otherwise direct API key\n * - For openai/* models: Uses OAuth when configured, otherwise direct API key from AuthStorage\n * - For moonshotai/* models: Uses Moonshot AI Anthropic-compatible endpoint\n * - For all other providers: Uses Mastra's model router (models.dev gateway)\n */\nexport function resolveModel(\n  modelId: string,\n  options?: { thinkingLevel?: ThinkingLevel; remapForCodexOAuth?: boolean; requestContext?: RequestContext },\n): GatewayLanguageModel {\n  reloadAuthStorage();\n  const headers = getAgentControllerHeaders(options?.requestContext);\n  const settings = loadSettings();\n  // Bedrock was previously cataloged under the MastraCode gateway namespace\n  // (`mastracode/amazon-bedrock/<model>`). Normalize any legacy saved ids to the\n  // standalone `amazon-bedrock/<model>` form so they resolve through the\n  // dedicated Bedrock gateway.\n  const bedrockLegacyPrefix = `${MASTRACODE_GATEWAY_ID}/amazon-bedrock/`;\n  const bedrockNormalizedInput = modelId.startsWith(bedrockLegacyPrefix)\n    ? modelId.slice(MASTRACODE_GATEWAY_ID.length + 1)\n    : modelId;\n  // Deployed web registers a custom providers source (DB-backed, tenant\n  // scoped); when registered it is authoritative and settings.json custom\n  // providers are ignored. Undefined = local settings-based behavior.\n  const customProviders = resolveCustomProviders(options?.requestContext) ?? settings.customProviders;\n  // Ids selected from the shared /models catalog were previously persisted in\n  // the gateway-qualified `mastracode/<customProviderId>/<model>` form, which\n  // parses the provider as `mastracode` and breaks provider config lookup.\n  // Normalize at resolution time (in addition to stripping at selection time)\n  // so already-saved ids and any surface that persists the raw catalog id\n  // still resolve to the custom provider.\n  const normalizedInput = stripMastraCodeCustomProviderPrefix(bedrockNormalizedInput, customProviders);\n  const isMastraGatewayModel = normalizedInput.startsWith(MASTRA_GATEWAY_PREFIX);\n  const normalizedModelId = stripMastraGatewayPrefix(normalizedInput);\n  const [providerId, ...modelParts] = normalizedModelId.split('/');\n  const bareModelId = modelParts.join('/');\n  if (!providerId || !bareModelId) {\n    throw new Error(`Invalid model id: ${modelId}`);\n  }\n\n  if (providerId === AMAZON_BEDROCK_GATEWAY_ID) {\n    const bedrockGateway = createAmazonBedrockGateway();\n    const routerId = `${AMAZON_BEDROCK_GATEWAY_ID}/${bareModelId}`;\n    const auth = bedrockGateway.resolveAuth({\n      gatewayId: AMAZON_BEDROCK_GATEWAY_ID,\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      routerId,\n    });\n    return bedrockGateway.resolveLanguageModel({\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      apiKey: auth?.apiKey ?? '',\n      headers,\n    });\n  }\n\n  const routerId = `${MASTRACODE_GATEWAY_ID}/${normalizedModelId}`;\n\n  const mgApiKey = MastraCodeGateway.getMastraGatewayApiKey();\n  const rawGatewayBase =\n    settings.memoryGateway?.baseUrl ?? process.env['MASTRA_GATEWAY_URL'] ?? 'https://gateway-api.mastra.ai';\n  // Deployed web registers a per-tenant credential store provider; when the\n  // request carries an authenticated tenant, resolve credentials through the\n  // caller's own store (user > org > env). Undefined = global AuthStorage.\n  const credentialStore = resolveCredentialStore(options?.requestContext);\n  const gateway = createMastraCodeGateway({\n    mastraGatewayBaseUrl: rawGatewayBase.replace(/\\/+$/, '').replace(/\\/v1$/, ''),\n    mastraGatewayApiKey: mgApiKey,\n    routeThroughMastraGateway: Boolean(mgApiKey && isMastraGatewayModel),\n    thinkingLevel: options?.thinkingLevel,\n    customProviders,\n    credentialStore,\n  });\n\n  const auth = gateway.resolveAuth({\n    gatewayId: MASTRACODE_GATEWAY_ID,\n    providerId,\n    modelId: bareModelId,\n    routerId,\n  });\n\n  return gateway.resolveLanguageModel({\n    providerId,\n    modelId: bareModelId,\n    apiKey: auth?.apiKey ?? mgApiKey ?? '',\n    headers,\n  });\n}\n\n/**\n * Resolve the effective thinking level for the current request.\n *\n * Precedence:\n *   1. Session override (`state.thinkingLevel`, set via /think or the session\n *      settings panel).\n *   2. Per-mode default from settings (`models.modeThinkingDefaults[mode]`).\n *   3. Global default (`preferences.thinkingLevel`).\n *\n * Resolved per-request (not seeded at session start) so configuration changes\n * apply to the next request of every session — including automated\n * (rule-driven) Factory runs that nobody ever opens interactively.\n */\nexport function resolveRequestThinkingLevel(\n  agentControllerContext: AgentControllerRequestContext<any> | undefined,\n  settingsPath?: string,\n): ThinkingLevel {\n  const override = agentControllerContext?.state?.thinkingLevel as ThinkingLevel | undefined;\n  if (override !== undefined) return override;\n  const modeId = agentControllerContext?.session?.modeId;\n  return resolveDefaultThinkingLevel(loadSettings(settingsPath), modeId).level;\n}\n\n/**\n * Dynamic model function that reads the current model from controller state.\n * This allows runtime model switching via the /models picker.\n */\nexport function getDynamicModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel {\n  const agentControllerContext = requestContext.get('controller') as AgentControllerRequestContext<any> | undefined;\n\n  const modelId = agentControllerContext?.session?.modelId;\n  if (!modelId) {\n    // A missing controller context means the run was started without session\n    // request context at all (e.g. a signal delivered to an idle thread) —\n    // \"use /models\" would mislead there, the user's selection was never the\n    // problem.\n    if (!agentControllerContext) {\n      throw new Error(\n        'No model available: this run started without a controller session context, so no model selection could be resolved.',\n      );\n    }\n    throw new Error('No model selected. Use /models to select a model first.');\n  }\n\n  const thinkingLevel = resolveRequestThinkingLevel(agentControllerContext, settingsPath);\n\n  return resolveModel(modelId, { thinkingLevel, remapForCodexOAuth: true, requestContext });\n}\n\n/**\n * Goal judge model resolver for the agent's `goal.judge` config. Resolves the\n * configured goal judge model through mastracode's gateway so provider\n * credentials (stored in auth storage, not just env) are injected — a bare model\n * id handed to core's default model router would fail to find the API key.\n *\n * Returns `undefined` when no judge model is configured, which keeps the goal\n * step a complete no-op (the goal mechanism requires a judge to do anything).\n *\n * `settingsPath` must be the same source `createMastraCode()` reads from so the\n * judge model and the goal budget (`goalMaxTurns`) come from one config — with a\n * custom `settingsPath` a bare `loadSettings()` here could read a different file\n * and silently turn the goal step into a no-op.\n */\nexport function getGoalJudgeModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel | undefined {\n  const judgeModelId = loadSettings(settingsPath).models.goalJudgeModel;\n  if (!judgeModelId) return undefined;\n  return resolveModel(judgeModelId, { remapForCodexOAuth: true, requestContext });\n}\n"],"mappings":";;;;;;AA8CA,SAAS,0BAA0B,gBAAkE;CACnG,MAAM,yBAAyB,gBAAgB,IAAI,YAAY;CAC/D,MAAM,UAAU;EACd,GAAI,wBAAwB,WAAW,EAAE,eAAe,uBAAuB,SAAS,IAAI,CAAC;EAC7F,GAAI,wBAAwB,aAAa,EAAE,iBAAiB,uBAAuB,WAAW,IAAI,CAAC;CACrG;CAEA,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI,UAAU,KAAA;AACrD;AAEA,SAAgB,wBAAwB,SAAsD;CAC5F,OAAO,IAAI,kBAAkB,OAAO;AACtC;AAEA,SAAgB,qCAAqC,SAAsC;CACzF,OAAO,mBAAmB,oBACtB,QAAQ,2BAA2B,IACnC,kBAAkB,2BAA2B,OAAO;AAC1D;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,aACd,SACA,SACsB;CACtB,kBAAkB;CAClB,MAAM,UAAU,0BAA0B,SAAS,cAAc;CACjE,MAAM,WAAW,aAAa;CAK9B,MAAM,sBAAsB,GAAG,sBAAsB;CACrD,MAAM,yBAAyB,QAAQ,WAAW,mBAAmB,IACjE,QAAQ,MAAM,sBAAsB,SAAS,CAAC,IAC9C;CAIJ,MAAM,kBAAkB,uBAAuB,SAAS,cAAc,KAAK,SAAS;CAOpF,MAAM,kBAAkB,oCAAoC,wBAAwB,eAAe;CACnG,MAAM,uBAAuB,gBAAgB,WAAW,qBAAqB;CAC7E,MAAM,oBAAoB,yBAAyB,eAAe;CAClE,MAAM,CAAC,YAAY,GAAG,cAAc,kBAAkB,MAAM,GAAG;CAC/D,MAAM,cAAc,WAAW,KAAK,GAAG;CACvC,IAAI,CAAC,cAAc,CAAC,aAClB,MAAM,IAAI,MAAM,qBAAqB,SAAS;CAGhD,IAAI,eAAA,kBAA0C;EAC5C,MAAM,iBAAiB,2BAA2B;EAClD,MAAM,WAAW,GAAG,0BAA0B,GAAG;EACjD,MAAM,OAAO,eAAe,YAAY;GACtC,WAAW;GACX,YAAY;GACZ,SAAS;GACT;EACF,CAAC;EACD,OAAO,eAAe,qBAAqB;GACzC,YAAY;GACZ,SAAS;GACT,QAAQ,MAAM,UAAU;GACxB;EACF,CAAC;CACH;CAEA,MAAM,WAAW,GAAG,sBAAsB,GAAG;CAE7C,MAAM,WAAW,kBAAkB,uBAAuB;CAC1D,MAAM,iBACJ,SAAS,eAAe,WAAW,QAAQ,IAAI,yBAAyB;CAI1E,MAAM,kBAAkB,uBAAuB,SAAS,cAAc;CACtE,MAAM,UAAU,wBAAwB;EACtC,sBAAsB,eAAe,QAAQ,QAAQ,EAAE,CAAC,CAAC,QAAQ,SAAS,EAAE;EAC5E,qBAAqB;EACrB,2BAA2B,QAAQ,YAAY,oBAAoB;EACnE,eAAe,SAAS;EACxB;EACA;CACF,CAAC;CAED,MAAM,OAAO,QAAQ,YAAY;EAC/B,WAAW;EACX;EACA,SAAS;EACT;CACF,CAAC;CAED,OAAO,QAAQ,qBAAqB;EAClC;EACA,SAAS;EACT,QAAQ,MAAM,UAAU,YAAY;EACpC;CACF,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAgB,4BACd,wBACA,cACe;CACf,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,SAAS,wBAAwB,SAAS;CAChD,OAAO,4BAA4B,aAAa,YAAY,GAAG,MAAM,CAAC,CAAC;AACzE;;;;;AAMA,SAAgB,gBACd,EAAE,kBACF,cACe;CACf,MAAM,yBAAyB,eAAe,IAAI,YAAY;CAE9D,MAAM,UAAU,wBAAwB,SAAS;CACjD,IAAI,CAAC,SAAS;EAKZ,IAAI,CAAC,wBACH,MAAM,IAAI,MACR,qHACF;EAEF,MAAM,IAAI,MAAM,yDAAyD;CAC3E;CAIA,OAAO,aAAa,SAAS;EAAE,eAFT,4BAA4B,wBAAwB,YAE/B;EAAG,oBAAoB;EAAM;CAAe,CAAC;AAC1F;;;;;;;;;;;;;;;AAgBA,SAAgB,kBACd,EAAE,kBACF,cAC2B;CAC3B,MAAM,eAAe,aAAa,YAAY,CAAC,CAAC,OAAO;CACvD,IAAI,CAAC,cAAc,OAAO,KAAA;CAC1B,OAAO,aAAa,cAAc;EAAE,oBAAoB;EAAM;CAAe,CAAC;AAChF"}
+{"version":3,"file":"model.js","names":[],"sources":["../../src/agents/model.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { GatewayLanguageModel, MastraModelGatewayInterface } from '@mastra/core/llm';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport {\n  loadSettings,\n  resolveDefaultThinkingLevel,\n  stripMastraCodeCustomProviderPrefix,\n} from '../onboarding/settings.js';\nimport { AMAZON_BEDROCK_GATEWAY_ID, createAmazonBedrockGateway } from '../providers/amazon-bedrock-gateway.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { resolveCredentialStore } from './credential-resolver.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\nimport {\n  MASTRA_GATEWAY_PREFIX,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  reloadAuthStorage,\n  stripMastraGatewayPrefix,\n} from './mastracode-gateway.js';\nimport type { MastraCodeGatewayOptions } from './mastracode-gateway.js';\n\nexport {\n  getAnthropicApiKey,\n  getOpenAIApiKey,\n  MASTRACODE_GATEWAY_ID,\n  MastraCodeGateway,\n  remapOpenAIModelForCodexOAuth,\n  resolveAuth,\n} from './mastracode-gateway.js';\nexport type { MastraCodeCustomProvider, MastraCodeGatewayOptions } from './mastracode-gateway.js';\nexport {\n  setCredentialStoreProvider,\n  hasCredentialStoreProvider,\n  resolveTenantFromRequestContext,\n} from './credential-resolver.js';\nexport type { CredentialTenant, CredentialStoreProvider } from './credential-resolver.js';\nexport {\n  setCustomProvidersSource,\n  hasCustomProvidersSource,\n  resolveCustomProviders,\n} from './custom-provider-source.js';\nexport type { CustomProvidersSource } from './custom-provider-source.js';\n\ntype ResolvedModel = GatewayLanguageModel;\ntype ModelRequestHeaders = Record<string, string>;\n\nfunction getAgentControllerHeaders(requestContext?: RequestContext): ModelRequestHeaders | undefined {\n  const agentControllerContext = requestContext?.get('controller') as AgentControllerRequestContext<any> | undefined;\n  const headers = {\n    ...(agentControllerContext?.threadId ? { 'x-thread-id': agentControllerContext.threadId } : {}),\n    ...(agentControllerContext?.resourceId ? { 'x-resource-id': agentControllerContext.resourceId } : {}),\n  };\n\n  return Object.keys(headers).length > 0 ? headers : undefined;\n}\n\nexport function createMastraCodeGateway(options: MastraCodeGatewayOptions): MastraCodeGateway {\n  return new MastraCodeGateway(options);\n}\n\nexport function createMastraCodeModelCatalogProvider(gateway: MastraModelGatewayInterface) {\n  return gateway instanceof MastraCodeGateway\n    ? gateway.createModelCatalogProvider()\n    : MastraCodeGateway.createModelCatalogProvider(gateway);\n}\n\n/**\n * Placeholder for future model ID normalization.\n * Currently returns the input unchanged, but exists as a seam\n * for aliasing, casing fixes, or validation in the future.\n */\nexport function resolveModelId(modelId: string): string {\n  return modelId;\n}\n\n/**\n * Resolve a model ID to the correct provider instance.\n * Shared by the main agent, observer, and reflector.\n *\n * - For anthropic/* models: Uses stored OAuth credentials when present, otherwise direct API key\n * - For openai/* models: Uses OAuth when configured, otherwise direct API key from AuthStorage\n * - For moonshotai/* models: Uses Moonshot AI Anthropic-compatible endpoint\n * - For all other providers: Uses Mastra's model router (models.dev gateway)\n */\nexport function resolveModel(\n  modelId: string,\n  options?: { thinkingLevel?: ThinkingLevel; remapForCodexOAuth?: boolean; requestContext?: RequestContext },\n): GatewayLanguageModel {\n  reloadAuthStorage();\n  const headers = getAgentControllerHeaders(options?.requestContext);\n  const settings = loadSettings();\n  // Bedrock was previously cataloged under the MastraCode gateway namespace\n  // (`mastracode/amazon-bedrock/<model>`). Normalize any legacy saved ids to the\n  // standalone `amazon-bedrock/<model>` form so they resolve through the\n  // dedicated Bedrock gateway.\n  const bedrockLegacyPrefix = `${MASTRACODE_GATEWAY_ID}/amazon-bedrock/`;\n  const bedrockNormalizedInput = modelId.startsWith(bedrockLegacyPrefix)\n    ? modelId.slice(MASTRACODE_GATEWAY_ID.length + 1)\n    : modelId;\n  // Deployed web registers a custom providers source (DB-backed, tenant\n  // scoped); when registered it is authoritative and settings.json custom\n  // providers are ignored. Undefined = local settings-based behavior.\n  const customProviders = resolveCustomProviders(options?.requestContext) ?? settings.customProviders;\n  // Ids selected from the shared /models catalog were previously persisted in\n  // the gateway-qualified `mastracode/<customProviderId>/<model>` form, which\n  // parses the provider as `mastracode` and breaks provider config lookup.\n  // Normalize at resolution time (in addition to stripping at selection time)\n  // so already-saved ids and any surface that persists the raw catalog id\n  // still resolve to the custom provider.\n  const normalizedInput = stripMastraCodeCustomProviderPrefix(bedrockNormalizedInput, customProviders);\n  const isMastraGatewayModel = normalizedInput.startsWith(MASTRA_GATEWAY_PREFIX);\n  const normalizedModelId = stripMastraGatewayPrefix(normalizedInput);\n  const [providerId, ...modelParts] = normalizedModelId.split('/');\n  const bareModelId = modelParts.join('/');\n  if (!providerId || !bareModelId) {\n    throw new Error(`Invalid model id: ${modelId}`);\n  }\n\n  if (providerId === AMAZON_BEDROCK_GATEWAY_ID) {\n    const bedrockGateway = createAmazonBedrockGateway();\n    const routerId = `${AMAZON_BEDROCK_GATEWAY_ID}/${bareModelId}`;\n    const auth = bedrockGateway.resolveAuth({\n      gatewayId: AMAZON_BEDROCK_GATEWAY_ID,\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      routerId,\n    });\n    return bedrockGateway.resolveLanguageModel({\n      providerId: AMAZON_BEDROCK_GATEWAY_ID,\n      modelId: bareModelId,\n      apiKey: auth?.apiKey ?? '',\n      headers,\n    });\n  }\n\n  const routerId = `${MASTRACODE_GATEWAY_ID}/${normalizedModelId}`;\n\n  const mgApiKey = MastraCodeGateway.getMastraGatewayApiKey();\n  const rawGatewayBase =\n    settings.memoryGateway?.baseUrl ?? process.env['MASTRA_GATEWAY_URL'] ?? 'https://gateway-api.mastra.ai';\n  // Deployed web registers a per-tenant credential store provider; when the\n  // request carries an authenticated tenant, resolve credentials through the\n  // caller's own store (user > org > env). Undefined = global AuthStorage.\n  const credentialStore = resolveCredentialStore(options?.requestContext);\n  const gateway = createMastraCodeGateway({\n    mastraGatewayBaseUrl: rawGatewayBase.replace(/\\/+$/, '').replace(/\\/v1$/, ''),\n    mastraGatewayApiKey: mgApiKey,\n    routeThroughMastraGateway: Boolean(mgApiKey && isMastraGatewayModel),\n    thinkingLevel: options?.thinkingLevel,\n    customProviders,\n    credentialStore,\n  });\n\n  const auth = gateway.resolveAuth({\n    gatewayId: MASTRACODE_GATEWAY_ID,\n    providerId,\n    modelId: bareModelId,\n    routerId,\n  });\n\n  return gateway.resolveLanguageModel({\n    providerId,\n    modelId: bareModelId,\n    apiKey: auth?.apiKey ?? '',\n    headers,\n  });\n}\n\n/**\n * Resolve the effective thinking level for the current request.\n *\n * Precedence:\n *   1. Session override (`state.thinkingLevel`, set via /think or the session\n *      settings panel).\n *   2. Per-mode default from settings (`models.modeThinkingDefaults[mode]`).\n *   3. Global default (`preferences.thinkingLevel`).\n *\n * Resolved per-request (not seeded at session start) so configuration changes\n * apply to the next request of every session — including automated\n * (rule-driven) Factory runs that nobody ever opens interactively.\n */\nexport function resolveRequestThinkingLevel(\n  agentControllerContext: AgentControllerRequestContext<any> | undefined,\n  settingsPath?: string,\n): ThinkingLevel {\n  const override = agentControllerContext?.state?.thinkingLevel as ThinkingLevel | undefined;\n  if (override !== undefined) return override;\n  const modeId = agentControllerContext?.session?.modeId;\n  return resolveDefaultThinkingLevel(loadSettings(settingsPath), modeId).level;\n}\n\n/**\n * Dynamic model function that reads the current model from controller state.\n * This allows runtime model switching via the /models picker.\n */\nexport function getDynamicModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel {\n  const agentControllerContext = requestContext.get('controller') as AgentControllerRequestContext<any> | undefined;\n\n  const modelId = agentControllerContext?.session?.modelId;\n  if (!modelId) {\n    // A missing controller context means the run was started without session\n    // request context at all (e.g. a signal delivered to an idle thread) —\n    // \"use /models\" would mislead there, the user's selection was never the\n    // problem.\n    if (!agentControllerContext) {\n      throw new Error(\n        'No model available: this run started without a controller session context, so no model selection could be resolved.',\n      );\n    }\n    throw new Error('No model selected. Use /models to select a model first.');\n  }\n\n  const thinkingLevel = resolveRequestThinkingLevel(agentControllerContext, settingsPath);\n\n  return resolveModel(modelId, { thinkingLevel, remapForCodexOAuth: true, requestContext });\n}\n\n/**\n * Goal judge model resolver for the agent's `goal.judge` config. Resolves the\n * configured goal judge model through mastracode's gateway so provider\n * credentials (stored in auth storage, not just env) are injected — a bare model\n * id handed to core's default model router would fail to find the API key.\n *\n * Returns `undefined` when no judge model is configured, which keeps the goal\n * step a complete no-op (the goal mechanism requires a judge to do anything).\n *\n * `settingsPath` must be the same source `createMastraCode()` reads from so the\n * judge model and the goal budget (`goalMaxTurns`) come from one config — with a\n * custom `settingsPath` a bare `loadSettings()` here could read a different file\n * and silently turn the goal step into a no-op.\n */\nexport function getGoalJudgeModel(\n  { requestContext }: { requestContext: RequestContext },\n  settingsPath?: string,\n): ResolvedModel | undefined {\n  const judgeModelId = loadSettings(settingsPath).models.goalJudgeModel;\n  if (!judgeModelId) return undefined;\n  return resolveModel(judgeModelId, { remapForCodexOAuth: true, requestContext });\n}\n"],"mappings":";;;;;;AA8CA,SAAS,0BAA0B,gBAAkE;CACnG,MAAM,yBAAyB,gBAAgB,IAAI,YAAY;CAC/D,MAAM,UAAU;EACd,GAAI,wBAAwB,WAAW,EAAE,eAAe,uBAAuB,SAAS,IAAI,CAAC;EAC7F,GAAI,wBAAwB,aAAa,EAAE,iBAAiB,uBAAuB,WAAW,IAAI,CAAC;CACrG;CAEA,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI,UAAU,KAAA;AACrD;AAEA,SAAgB,wBAAwB,SAAsD;CAC5F,OAAO,IAAI,kBAAkB,OAAO;AACtC;AAEA,SAAgB,qCAAqC,SAAsC;CACzF,OAAO,mBAAmB,oBACtB,QAAQ,2BAA2B,IACnC,kBAAkB,2BAA2B,OAAO;AAC1D;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OAAO;AACT;;;;;;;;;;AAWA,SAAgB,aACd,SACA,SACsB;CACtB,kBAAkB;CAClB,MAAM,UAAU,0BAA0B,SAAS,cAAc;CACjE,MAAM,WAAW,aAAa;CAK9B,MAAM,sBAAsB,GAAG,sBAAsB;CACrD,MAAM,yBAAyB,QAAQ,WAAW,mBAAmB,IACjE,QAAQ,MAAM,sBAAsB,SAAS,CAAC,IAC9C;CAIJ,MAAM,kBAAkB,uBAAuB,SAAS,cAAc,KAAK,SAAS;CAOpF,MAAM,kBAAkB,oCAAoC,wBAAwB,eAAe;CACnG,MAAM,uBAAuB,gBAAgB,WAAW,qBAAqB;CAC7E,MAAM,oBAAoB,yBAAyB,eAAe;CAClE,MAAM,CAAC,YAAY,GAAG,cAAc,kBAAkB,MAAM,GAAG;CAC/D,MAAM,cAAc,WAAW,KAAK,GAAG;CACvC,IAAI,CAAC,cAAc,CAAC,aAClB,MAAM,IAAI,MAAM,qBAAqB,SAAS;CAGhD,IAAI,eAAA,kBAA0C;EAC5C,MAAM,iBAAiB,2BAA2B;EAClD,MAAM,WAAW,GAAG,0BAA0B,GAAG;EACjD,MAAM,OAAO,eAAe,YAAY;GACtC,WAAW;GACX,YAAY;GACZ,SAAS;GACT;EACF,CAAC;EACD,OAAO,eAAe,qBAAqB;GACzC,YAAY;GACZ,SAAS;GACT,QAAQ,MAAM,UAAU;GACxB;EACF,CAAC;CACH;CAEA,MAAM,WAAW,GAAG,sBAAsB,GAAG;CAE7C,MAAM,WAAW,kBAAkB,uBAAuB;CAC1D,MAAM,iBACJ,SAAS,eAAe,WAAW,QAAQ,IAAI,yBAAyB;CAI1E,MAAM,kBAAkB,uBAAuB,SAAS,cAAc;CACtE,MAAM,UAAU,wBAAwB;EACtC,sBAAsB,eAAe,QAAQ,QAAQ,EAAE,CAAC,CAAC,QAAQ,SAAS,EAAE;EAC5E,qBAAqB;EACrB,2BAA2B,QAAQ,YAAY,oBAAoB;EACnE,eAAe,SAAS;EACxB;EACA;CACF,CAAC;CAED,MAAM,OAAO,QAAQ,YAAY;EAC/B,WAAW;EACX;EACA,SAAS;EACT;CACF,CAAC;CAED,OAAO,QAAQ,qBAAqB;EAClC;EACA,SAAS;EACT,QAAQ,MAAM,UAAU;EACxB;CACF,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAgB,4BACd,wBACA,cACe;CACf,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,SAAS,wBAAwB,SAAS;CAChD,OAAO,4BAA4B,aAAa,YAAY,GAAG,MAAM,CAAC,CAAC;AACzE;;;;;AAMA,SAAgB,gBACd,EAAE,kBACF,cACe;CACf,MAAM,yBAAyB,eAAe,IAAI,YAAY;CAE9D,MAAM,UAAU,wBAAwB,SAAS;CACjD,IAAI,CAAC,SAAS;EAKZ,IAAI,CAAC,wBACH,MAAM,IAAI,MACR,qHACF;EAEF,MAAM,IAAI,MAAM,yDAAyD;CAC3E;CAIA,OAAO,aAAa,SAAS;EAAE,eAFT,4BAA4B,wBAAwB,YAE/B;EAAG,oBAAoB;EAAM;CAAe,CAAC;AAC1F;;;;;;;;;;;;;;;AAgBA,SAAgB,kBACd,EAAE,kBACF,cAC2B;CAC3B,MAAM,eAAe,aAAa,YAAY,CAAC,CAAC,OAAO;CACvD,IAAI,CAAC,cAAc,OAAO,KAAA;CAC1B,OAAO,aAAa,cAAc;EAAE,oBAAoB;EAAM;CAAe,CAAC;AAChF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/code-sdk",
-  "version": "1.2.0-alpha.14",
+  "version": "1.2.0-alpha.15",
   "description": "Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it",
   "type": "module",
   "publishConfig": {
@@ -56,19 +56,19 @@
     "vscode-languageserver-protocol": "^3.17.5",
     "yaml": "^2.7.1",
     "zod": "^4.3.6",
+    "@mastra/core": "1.58.0-alpha.13",
+    "@mastra/duckdb": "1.6.1-alpha.0",
     "@mastra/agent-browser": "0.5.1-alpha.0",
-    "@mastra/core": "1.58.0-alpha.12",
     "@mastra/fastembed": "1.2.0",
-    "@mastra/duckdb": "1.6.1-alpha.0",
     "@mastra/github-signals": "0.2.5-alpha.1",
+    "@mastra/memory": "1.26.1-alpha.6",
+    "@mastra/observability": "1.16.6-alpha.3",
     "@mastra/libsql": "1.20.0-alpha.2",
     "@mastra/mcp": "1.16.0-alpha.2",
-    "@mastra/observability": "1.16.6-alpha.3",
-    "@mastra/memory": "1.26.1-alpha.6",
     "@mastra/pg": "1.20.0-alpha.3",
-    "@mastra/tavily": "1.1.1",
+    "@mastra/schema-compat": "1.3.6-alpha.3",
     "@mastra/stagehand": "0.3.2-alpha.1",
-    "@mastra/schema-compat": "1.3.6-alpha.3"
+    "@mastra/tavily": "1.1.1"
   },
   "devDependencies": {
     "@libsql/client": "^0.17.4",
@@ -79,9 +79,9 @@
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.57.0",
     "vitest": "4.1.10",
+    "@internal/lint": "0.0.121",
     "@internal/types-builder": "0.0.96",
-    "@internal/workspace-test-utils": "0.0.65",
-    "@internal/lint": "0.0.121"
+    "@internal/workspace-test-utils": "0.0.65"
   },
   "engines": {
     "node": ">=22.19.0"