@mastra/code-sdk 1.5.2-alpha.0 → 1.5.2-alpha.2

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @mastra/code-sdk
 
+## 1.5.2-alpha.2
+
+### Patch Changes
+
+- Added Kimi For Coding account authentication, API key authentication, token refresh, and model routing. ([#22428](https://github.com/mastra-ai/mastra/pull/22428))
+
+  ```text
+  /connect
+  ```
+
+- Updated dependencies [[`0885364`](https://github.com/mastra-ai/mastra/commit/0885364c2fc7fa31febcfc444fc1ba5231ac1257)]:
+  - @mastra/core@1.63.1-alpha.2
+  - @mastra/memory@1.28.1-alpha.1
+  - @mastra/libsql@1.22.1-alpha.0
+  - @mastra/pg@1.22.1-alpha.0
+
+## 1.5.2-alpha.1
+
+### Patch Changes
+
+- Fix knowledge captured in factory sessions being stored in the wrong tenant. ([#21823](https://github.com/mastra-ai/mastra/pull/21823))
+
+  Knowledge captured during a factory session is now always stored under the organization
+  that owns the session, so it is visible in that organization's knowledge graph. A session
+  whose organization cannot be determined no longer stores knowledge somewhere it could
+  never be read back from; it stops capturing and reports why. Local (TUI/studio) use is
+  unaffected and captures under a dedicated local scope.
+
+- Updated dependencies [[`295e506`](https://github.com/mastra-ai/mastra/commit/295e506b9e6cec99e7181c5f712648888cd9486f), [`8c3be07`](https://github.com/mastra-ai/mastra/commit/8c3be0761a862c5c035ed6e5d633de87cbba20e7), [`078affd`](https://github.com/mastra-ai/mastra/commit/078affdaea57ac5e95a77e9e7b197d1878190684), [`a87ff53`](https://github.com/mastra-ai/mastra/commit/a87ff53cef9318bea80c38c3bf3d9d9d507ac3c1), [`9e3403e`](https://github.com/mastra-ai/mastra/commit/9e3403e9868240cb18841898e84cf008ebd7a87e), [`791bf5e`](https://github.com/mastra-ai/mastra/commit/791bf5e81cd27e2e1cff66122f1380ab8a3dda41)]:
+  - @mastra/memory@1.28.1-alpha.0
+  - @mastra/core@1.63.1-alpha.1
+  - @mastra/observability@1.17.4-alpha.0
+  - @mastra/mcp@1.17.2
+
 ## 1.5.2-alpha.0
 
 ### Patch Changes

package/LICENSE.md

@@ -1,10 +1,12 @@
 Portions of this software are licensed as follows:
 
-- All content that resides under any directory named "ee/" within this
+- All content that resides under any directory named `ee/` within this
   repository, including but not limited to:
-  - `packages/core/src/auth/ee/`
-  - `packages/server/src/server/auth/ee/`
-    is licensed under the license defined in `ee/LICENSE`.
+  - `@mastra/core/auth/ee`
+  - `@mastra/core/agent-builder/ee`
+  - `@mastra/editor/ee`
+
+  is licensed under the license defined in [`ee/LICENSE`](https://github.com/mastra-ai/mastra/blob/main/ee/LICENSE).
 
 - All third-party components incorporated into the Mastra Software are
   licensed under the original license provided by the owner of the

package/dist/agents/mastracode-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mastracode-gateway.d.ts","sourceRoot":"","sources":["../../src/agents/mastracode-gateway.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAGL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,cAAc,EACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAiBxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAIlE,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAC/C,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAYlD,MAAM,MAAM,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzG,MAAM,MAAM,wBAAwB,GAAG;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,CAAC;AAIF,wBAAgB,iBAAiB,SAEhC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAMD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAoBrE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAUjG;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAQ9F;AAqCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEpH;AAgFD,qBAAa,iBAAkB,SAAQ,kBAAkB;;IACvD,QAAQ,CAAC,EAAE,gBAAyB;IACpC,QAAQ,CAAC,IAAI,wBAAwB;gBAWzB,EACV,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,EAAE,wBAAwB;IAY3B,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD,+EAA+E;IAC/E,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAsBtC,MAAM,CAAC,mBAAmB,CACxB,OAAO,EAAE,kBAAkB,EAC3B,mBAAmB,CAAC,EAAE,MAAM,EAC5B,WAAW,GAAE,eAA6B,GACzC,iBAAiB,GAAG,SAAS;IAchC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,GAAG,0BAA0B;IA+BnG,0BAA0B,IAAI,0BAA0B;IAWlD,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IA+B/D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIrE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMjD,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAevE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CAsMzB"}
+{"version":3,"file":"mastracode-gateway.d.ts","sourceRoot":"","sources":["../../src/agents/mastracode-gateway.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAGL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,cAAc,EACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAkBxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAIlE,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAC/C,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAYlD,MAAM,MAAM,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzG,MAAM,MAAM,wBAAwB,GAAG;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,CAAC;AAIF,wBAAgB,iBAAiB,SAEhC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAMD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAoBrE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAUjG;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAQ9F;AAwCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEpH;AAgFD,qBAAa,iBAAkB,SAAQ,kBAAkB;;IACvD,QAAQ,CAAC,EAAE,gBAAyB;IACpC,QAAQ,CAAC,IAAI,wBAAwB;gBAWzB,EACV,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,EAAE,wBAAwB;IAY3B,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD,+EAA+E;IAC/E,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAsBtC,MAAM,CAAC,mBAAmB,CACxB,OAAO,EAAE,kBAAkB,EAC3B,mBAAmB,CAAC,EAAE,MAAM,EAC5B,WAAW,GAAE,eAA6B,GACzC,iBAAiB,GAAG,SAAS;IAehC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,GAAG,0BAA0B;IA+BnG,0BAA0B,IAAI,0BAA0B;IAWlD,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAuC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIrE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMjD,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAevE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CA8MzB"}

package/dist/agents/mastracode-gateway.js

@@ -4,6 +4,7 @@ import { getCustomProviderId, loadSettings } from "../onboarding/settings.js";
 import { resolveCustomProviders } from "./custom-provider-source.js";
 import { buildAnthropicOAuthFetch, claudeCodeMiddleware, createAnthropicThinkingMiddleware, opencodeClaudeMaxProvider, promptCacheMiddleware } from "../providers/claude-max.js";
 import { getCopilotModelCatalog, githubCopilotProvider } from "../providers/github-copilot.js";
+import { KIMI_CODING_MODELS, kimiCodingProvider } from "../providers/kimi-coding.js";
 import { xaiProvider } from "../providers/xai.js";
 import { createOpenAI } from "@ai-sdk/openai";
 import { wrapLanguageModel } from "ai";
@@ -91,7 +92,10 @@ function getProviderAuthKey(providerId, credentials = authStorage) {
 	const authProviderId = getAuthProviderId(providerId);
 	const storedCred = credentials.get(authProviderId);
 	if (storedCred?.type === "api_key" && storedCred.key.trim().length > 0) return storedCred.key.trim();
-	return credentials.getStoredApiKey(authProviderId)?.trim() || void 0;
+	const dedicatedKey = credentials.getStoredApiKey(authProviderId)?.trim();
+	if (dedicatedKey) return dedicatedKey;
+	if (credentials.allowEnvironmentFallback === false) return void 0;
+	return authProviderId === "kimi-for-coding" ? process.env.KIMI_API_KEY?.trim() || void 0 : void 0;
 }
 function resolveAuth(request, mastraGatewayApiKey) {
 	return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);
@@ -203,7 +207,8 @@ var MastraCodeGateway = class MastraCodeGateway extends MastraModelGateway {
 			apiKey: mastraGatewayApiKey,
 			source: "gateway"
 		};
-		if (credentials.get(getAuthProviderId(request.providerId))?.type === "oauth") return {
+		const authProviderId = getAuthProviderId(request.providerId);
+		if (credentials.get(authProviderId)?.type === "oauth") return {
 			bearerToken: "oauth",
 			source: "gateway"
 		};
@@ -257,6 +262,13 @@ var MastraCodeGateway = class MastraCodeGateway extends MastraModelGateway {
 				models
 			};
 		}
+		providers["kimi-for-coding"] = {
+			name: "Kimi For Coding",
+			apiKeyEnvVar: "KIMI_API_KEY",
+			apiKeyHeader: "Authorization",
+			gateway: this.id,
+			models: [...KIMI_CODING_MODELS]
+		};
 		try {
 			const copilotModels = await getCopilotModelCatalog({ authStorage });
 			providers["github-copilot"] = {
@@ -323,6 +335,11 @@ var MastraCodeGateway = class MastraCodeGateway extends MastraModelGateway {
 			authStorage: this.#credentials
 		});
 		if (this.#routeThroughMastraGateway) return this.#mastraGateway.resolveLanguageModel(args);
+		if (args.providerId === "kimi-for-coding") return kimiCodingProvider(args.modelId, {
+			apiKey: args.apiKey,
+			headers: args.headers,
+			credentialStore: this.#credentials
+		});
 		return new ModelRouterLanguageModel({
 			id: `${args.providerId}/${args.modelId}`,
 			apiKey: args.apiKey,

package/dist/agents/mastracode-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"mastracode-gateway.js","names":["#mastraGateway","#mastraGatewayBaseUrl","#mastraGatewayApiKey","#routeThroughMastraGateway","#thinkingLevel","#customProviders","#settingsPath","#credentials","#getCustomProviders","#resolveAnthropicModel","#resolveOpenAIModel"],"sources":["../../src/agents/mastracode-gateway.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport { createOpenAI } from '@ai-sdk/openai';\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { CustomAvailableModel, CustomModelCatalogProvider } from '@mastra/core/agent-controller';\nimport {\n  GATEWAY_AUTH_HEADER,\n  MastraGateway,\n  MastraModelGateway,\n  ModelRouterLanguageModel,\n  PROVIDER_REGISTRY,\n} from '@mastra/core/llm';\nimport type {\n  GatewayAuthRequest,\n  GatewayAuthResult,\n  GatewayLanguageModel,\n  MastraModelGatewayInterface,\n  ProviderConfig,\n} from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { getCustomProviderId, loadSettings, MASTRA_GATEWAY_PROVIDER } from '../onboarding/settings.js';\nimport {\n  buildAnthropicOAuthFetch,\n  claudeCodeMiddleware,\n  createAnthropicThinkingMiddleware,\n  opencodeClaudeMaxProvider,\n  promptCacheMiddleware,\n} from '../providers/claude-max.js';\nimport { getCopilotModelCatalog, githubCopilotProvider } from '../providers/github-copilot.js';\nimport {\n  buildOpenAICodexOAuthFetch,\n  createCodexMiddleware,\n  getEffectiveThinkingLevel,\n  openaiCodexProvider,\n  THINKING_LEVEL_TO_REASONING_EFFORT,\n} from '../providers/openai-codex.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { xaiProvider } from '../providers/xai.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\n\nexport const OPENAI_PREFIX = 'openai/';\nexport const MASTRA_GATEWAY_PREFIX = 'mastra/';\nexport const MASTRACODE_GATEWAY_ID = 'mastracode';\n\nconst CODEX_OPENAI_MODEL_REMAPS: Record<string, string> = {\n  'gpt-5.3': 'gpt-5.3-codex',\n  'gpt-5.2': 'gpt-5.2-codex',\n  'gpt-5.1': 'gpt-5.1-codex',\n  'gpt-5.1-mini': 'gpt-5.1-codex-mini',\n  'gpt-5': 'gpt-5-codex',\n};\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport type MastraCodeCustomProvider = { name: string; url: string; apiKey?: string; models?: string[] };\n\nexport type MastraCodeGatewayOptions = {\n  mastraGatewayBaseUrl: string;\n  mastraGatewayApiKey?: string;\n  routeThroughMastraGateway: boolean;\n  thinkingLevel?: ThinkingLevel;\n  customProviders?: MastraCodeCustomProvider[];\n  settingsPath?: string;\n  /**\n   * Per-tenant credential source for this gateway instance. Defaults to the\n   * server-global file-backed `AuthStorage`; deployed web passes the calling\n   * tenant's store so model calls use the caller's own credentials.\n   */\n  credentialStore?: CredentialStore;\n};\n\nconst authStorage = new AuthStorage();\n\nexport function reloadAuthStorage() {\n  authStorage.reload();\n}\n\nexport function stripMastraGatewayPrefix(modelId: string): string {\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? modelId.substring(MASTRA_GATEWAY_PREFIX.length) : modelId;\n}\n\nfunction normalizeAnthropicModelId(modelId: string): string {\n  return modelId.replace(/\\.(?=\\d)/g, '-');\n}\n\nexport function remapOpenAIModelForCodexOAuth(modelId: string): string {\n  const normalizedModelId = stripMastraGatewayPrefix(modelId);\n\n  if (!normalizedModelId.startsWith(OPENAI_PREFIX)) {\n    return modelId;\n  }\n\n  const openaiModelId = normalizedModelId.substring(OPENAI_PREFIX.length);\n\n  if (openaiModelId.includes('-codex')) {\n    return modelId;\n  }\n\n  const codexModelId = CODEX_OPENAI_MODEL_REMAPS[openaiModelId];\n  if (!codexModelId) {\n    return modelId;\n  }\n\n  const remappedModelId = `${OPENAI_PREFIX}${codexModelId}`;\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? `${MASTRA_GATEWAY_PREFIX}${remappedModelId}` : remappedModelId;\n}\n\n/**\n * Resolve the Anthropic API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getAnthropicApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('anthropic');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('anthropic')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false\n    ? undefined\n    : process.env.ANTHROPIC_API_KEY?.trim() || undefined;\n}\n\n/**\n * Resolve the OpenAI API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getOpenAIApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('openai-codex');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('openai-codex')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false ? undefined : process.env.OPENAI_API_KEY?.trim() || undefined;\n}\n\nfunction anthropicApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers?: ModelRequestHeaders,\n  thinkingLevel?: ThinkingLevel,\n) {\n  const anthropic = createAnthropic({ apiKey, headers });\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, thinkingLevel);\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [promptCacheMiddleware, ...(thinkingMiddleware ? [thinkingMiddleware] : [])],\n  });\n}\n\nfunction openaiApiKeyProvider(modelId: string, apiKey: string, headers?: ModelRequestHeaders) {\n  const openai = createOpenAI({ apiKey, baseURL: process.env.OPENAI_BASE_URL, headers });\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [],\n  });\n}\n\nfunction getAuthProviderId(providerId: string): string {\n  return providerId === 'openai' ? 'openai-codex' : providerId;\n}\n\nfunction getProviderAuthKey(providerId: string, credentials: CredentialStore = authStorage): string | undefined {\n  const authProviderId = getAuthProviderId(providerId);\n  const storedCred = credentials.get(authProviderId);\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  return credentials.getStoredApiKey(authProviderId)?.trim() || undefined;\n}\n\nexport function resolveAuth(request: GatewayAuthRequest, mastraGatewayApiKey?: string): GatewayAuthResult | undefined {\n  return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);\n}\n\nfunction getGatewayProviderKey(gatewayId: string, providerId: string): string {\n  if (gatewayId === 'models.dev') return providerId;\n  return providerId === gatewayId ? gatewayId : `${gatewayId}/${providerId}`;\n}\n\nfunction parseGatewayRouterId(\n  routerId: string,\n  gateway: MastraModelGatewayInterface,\n): { gatewayId: string; providerId: string; modelId: string } {\n  const [firstPart = '', secondPart = '', ...restParts] = routerId.split('/');\n  const gatewayId = gateway.id;\n\n  if (firstPart === gatewayId && secondPart) {\n    return {\n      gatewayId,\n      providerId: secondPart,\n      modelId: restParts.join('/'),\n    };\n  }\n\n  return {\n    gatewayId,\n    providerId: firstPart,\n    modelId: [secondPart, ...restParts].filter(Boolean).join('/'),\n  };\n}\n\nfunction hasResolvedAuth(auth: GatewayAuthResult | undefined): boolean {\n  if (!auth) return false;\n  if (auth.apiKey || auth.bearerToken) return true;\n  return auth.headers ? Object.keys(auth.headers).length > 0 : false;\n}\n\nasync function resolveGatewayProviderAuth(\n  gateway: MastraModelGatewayInterface,\n  routerId: string,\n): Promise<GatewayAuthResult | undefined> {\n  if (!gateway.resolveAuth) return undefined;\n\n  const parsed = parseGatewayRouterId(routerId, gateway);\n  try {\n    const result = await gateway.resolveAuth({\n      gatewayId: parsed.gatewayId,\n      providerId: parsed.providerId,\n      modelId: parsed.modelId,\n      routerId,\n    });\n    return hasResolvedAuth(result) ? result : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getMastraCodeProviderConfigs(\n  gateway: MastraModelGatewayInterface,\n): Promise<Record<string, ProviderConfig>> {\n  const providers: Record<string, ProviderConfig> = { ...(PROVIDER_REGISTRY as Record<string, ProviderConfig>) };\n\n  try {\n    const gatewayProviders = await gateway.fetchProviders();\n    for (const [providerId, config] of Object.entries(gatewayProviders)) {\n      providers[getGatewayProviderKey(gateway.id, providerId)] = {\n        ...config,\n        gateway: gateway.id,\n      };\n    }\n  } catch (error) {\n    console.warn(`Failed to load providers from gateway ${gateway.id}:`, error);\n  }\n\n  return providers;\n}\n\nfunction getApiKeyEnvVar(providerConfig: Pick<ProviderConfig, 'apiKeyEnvVar'> | undefined): string | undefined {\n  const envVars = providerConfig?.apiKeyEnvVar;\n  return Array.isArray(envVars) ? envVars[0] : envVars;\n}\n\nexport class MastraCodeGateway extends MastraModelGateway {\n  readonly id = MASTRACODE_GATEWAY_ID;\n  readonly name = 'MastraCode Gateway';\n\n  readonly #mastraGateway: MastraGateway;\n  readonly #mastraGatewayBaseUrl: string;\n  readonly #mastraGatewayApiKey?: string;\n  readonly #routeThroughMastraGateway: boolean;\n  readonly #thinkingLevel?: ThinkingLevel;\n  readonly #customProviders?: MastraCodeCustomProvider[];\n  readonly #settingsPath?: string;\n  readonly #credentials: CredentialStore;\n\n  constructor({\n    mastraGatewayBaseUrl,\n    mastraGatewayApiKey,\n    routeThroughMastraGateway,\n    thinkingLevel,\n    customProviders,\n    settingsPath,\n    credentialStore,\n  }: MastraCodeGatewayOptions) {\n    super();\n    this.#mastraGateway = new MastraGateway({ baseUrl: mastraGatewayBaseUrl });\n    this.#mastraGatewayBaseUrl = mastraGatewayBaseUrl;\n    this.#mastraGatewayApiKey = mastraGatewayApiKey;\n    this.#routeThroughMastraGateway = routeThroughMastraGateway;\n    this.#thinkingLevel = thinkingLevel;\n    this.#customProviders = customProviders;\n    this.#settingsPath = settingsPath;\n    this.#credentials = credentialStore ?? authStorage;\n  }\n\n  static getMastraGatewayApiKey(): string | undefined {\n    return authStorage.getStoredApiKey(MASTRA_GATEWAY_PROVIDER) ?? process.env['MASTRA_GATEWAY_API_KEY'];\n  }\n\n  /** @deprecated Renamed to {@link MastraCodeGateway.getMastraGatewayApiKey}. */\n  static getMemoryGatewayApiKey(): string | undefined {\n    return MastraCodeGateway.getMastraGatewayApiKey();\n  }\n\n  /**\n   * Claim an unprefixed model id (e.g. a bare `anthropic/...`) when this gateway\n   * can authenticate it via OAuth or a stored/env credential. This lets the\n   * shared gateway router select MastraCode for auth resolution, so the status\n   * bar and `/api-keys` reflect OAuth logins instead of only checking env vars.\n   */\n  handlesModel(modelId: string): boolean {\n    const parsed = parseGatewayRouterId(modelId, this);\n    if (!parsed.providerId || !parsed.modelId) return false;\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) return true;\n    const customProvider = this.#getCustomProviders().find(\n      provider => parsed.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) return true;\n    return hasResolvedAuth(\n      MastraCodeGateway.resolveProviderAuth(\n        {\n          gatewayId: this.id,\n          providerId: parsed.providerId,\n          modelId: parsed.modelId,\n          routerId: modelId,\n        },\n        undefined,\n        this.#credentials,\n      ),\n    );\n  }\n\n  static resolveProviderAuth(\n    request: GatewayAuthRequest,\n    mastraGatewayApiKey?: string,\n    credentials: CredentialStore = authStorage,\n  ): GatewayAuthResult | undefined {\n    if (request.gatewayId === 'mastra' && mastraGatewayApiKey) {\n      return { apiKey: mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const storedCred = credentials.get(getAuthProviderId(request.providerId));\n    if (storedCred?.type === 'oauth') {\n      return { bearerToken: 'oauth', source: 'gateway' };\n    }\n\n    const apiKey = getProviderAuthKey(request.providerId, credentials);\n    return apiKey ? { apiKey, source: 'gateway' } : undefined;\n  }\n\n  static createModelCatalogProvider(gateway: MastraModelGatewayInterface): CustomModelCatalogProvider {\n    return async () => {\n      const registry = await getMastraCodeProviderConfigs(gateway);\n      const models: CustomAvailableModel[] = [];\n\n      for (const [provider, providerConfig] of Object.entries(registry)) {\n        const apiKeyEnvVar = getApiKeyEnvVar(providerConfig);\n        const hasEnvKey = apiKeyEnvVar ? Boolean(process.env[apiKeyEnvVar]) : false;\n        const modelNames = providerConfig.models;\n        if (!Array.isArray(modelNames)) continue;\n\n        const gatewayAuth = modelNames[0]\n          ? await resolveGatewayProviderAuth(gateway, `${provider}/${modelNames[0]}`)\n          : undefined;\n\n        for (const modelName of modelNames) {\n          const id = `${provider}/${modelName}`;\n          models.push({\n            id,\n            provider,\n            modelName,\n            hasApiKey: hasEnvKey || Boolean(gatewayAuth),\n            apiKeyEnvVar: apiKeyEnvVar || undefined,\n          });\n        }\n      }\n\n      return models;\n    };\n  }\n\n  createModelCatalogProvider(): CustomModelCatalogProvider {\n    return MastraCodeGateway.createModelCatalogProvider(this);\n  }\n\n  #getCustomProviders(): MastraCodeCustomProvider[] {\n    // Explicit constructor list wins; then a registered source (deployed web,\n    // DB-backed — authoritative, so settings.json is never consulted); then\n    // the local file-backed settings.\n    return this.#customProviders ?? resolveCustomProviders() ?? loadSettings(this.#settingsPath).customProviders;\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    for (const provider of this.#getCustomProviders()) {\n      const models = provider.models ?? [];\n      if (!models.length) continue;\n      providers[getCustomProviderId(provider.name)] = {\n        name: provider.name,\n        url: provider.url,\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models,\n      };\n    }\n\n    try {\n      const copilotModels = await getCopilotModelCatalog({ authStorage });\n      providers['github-copilot'] = {\n        name: 'GitHub Copilot',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: copilotModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load GitHub Copilot model catalog:', error);\n    }\n\n    return providers;\n  }\n\n  buildUrl(modelId: string): string | undefined | Promise<string | undefined> {\n    return this.#routeThroughMastraGateway ? this.#mastraGateway.buildUrl(modelId) : modelId;\n  }\n\n  async getApiKey(modelId: string): Promise<string> {\n    const providerId = stripMastraGatewayPrefix(modelId).split('/', 1)[0];\n    if (this.#routeThroughMastraGateway) return this.#mastraGatewayApiKey ?? '';\n    return providerId ? (getProviderAuthKey(providerId, this.#credentials) ?? '') : '';\n  }\n\n  resolveAuth(request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) {\n      return { apiKey: this.#mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const customProvider = this.#getCustomProviders().find(\n      provider => request.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) {\n      return { apiKey: customProvider.apiKey, source: 'gateway' };\n    }\n\n    return MastraCodeGateway.resolveProviderAuth(request, undefined, this.#credentials);\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const customProvider = this.#getCustomProviders().find(\n      provider => args.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider) {\n      const provider = createOpenAICompatible({\n        name: args.providerId,\n        baseURL: customProvider.url,\n        apiKey: args.apiKey,\n        headers: args.headers,\n      });\n      return provider.chatModel(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'github-copilot') {\n      return githubCopilotProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'moonshotai') {\n      // Prefer the gateway-resolved key (stored credentials), then the canonical\n      // registry env var. Keep the legacy typo name as a fallback for anyone who\n      // set it because of the previous error message.\n      const apiKey =\n        args.apiKey?.trim() || process.env.MOONSHOT_API_KEY?.trim() || process.env.MOONSHOT_AI_API_KEY?.trim();\n      if (!apiKey) {\n        throw new Error('Need MOONSHOT_API_KEY');\n      }\n      return createAnthropic({\n        apiKey,\n        baseURL: 'https://api.moonshot.ai/anthropic/v1',\n        name: 'moonshotai.anthropicv1',\n        headers: args.headers,\n      })(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'anthropic') {\n      return this.#resolveAnthropicModel(args);\n    }\n\n    if (args.providerId === 'openai') {\n      const openaiModel = this.#resolveOpenAIModel(args);\n      if (openaiModel) return openaiModel;\n    }\n\n    if (args.providerId === 'xai' && this.#credentials.get('xai')?.type === 'oauth') {\n      return xaiProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (this.#routeThroughMastraGateway) {\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    return new ModelRouterLanguageModel({\n      id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n      apiKey: args.apiKey,\n      headers: args.headers,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveAnthropicModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const bareModelId = normalizeAnthropicModelId(args.modelId);\n    const storedCred = this.#credentials.get('anthropic');\n    const thinkingMiddleware = createAnthropicThinkingMiddleware(bareModelId, this.#thinkingLevel);\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const anthropic = createAnthropic({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildAnthropicOAuthFetch({ authStorage: this.#credentials }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: anthropic(bareModelId),\n          middleware: [\n            claudeCodeMiddleware,\n            promptCacheMiddleware,\n            ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n          ],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      const gatewayModel = this.#mastraGateway.resolveLanguageModel({\n        ...args,\n        modelId: bareModelId,\n      }) as GatewayLanguageModel;\n      if (!thinkingMiddleware) return gatewayModel;\n      return wrapLanguageModel({\n        model: gatewayModel as any,\n        middleware: [thinkingMiddleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      return opencodeClaudeMaxProvider(bareModelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n        thinkingLevel: this.#thinkingLevel,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        storedCred.key.trim(),\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getAnthropicApiKey(this.#credentials);\n    if (apiKey) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    // No stored credentials: use the OAuth-backed provider so the first request can trigger login.\n    return opencodeClaudeMaxProvider(bareModelId, {\n      headers: args.headers,\n      authStorage: this.#credentials,\n      thinkingLevel: this.#thinkingLevel,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveOpenAIModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel | undefined {\n    const storedCred = this.#credentials.get('openai-codex');\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n        const resolvedBareModelId = resolvedModelId.substring(OPENAI_PREFIX.length);\n        const requestedLevel: ThinkingLevel = this.#thinkingLevel ?? 'medium';\n        const effectiveLevel = getEffectiveThinkingLevel(resolvedBareModelId, requestedLevel);\n        const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n        const middleware = createCodexMiddleware(reasoningEffort);\n        const openai = createOpenAI({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildOpenAICodexOAuthFetch({ authStorage: this.#credentials, rewriteUrl: false }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: openai.responses(resolvedBareModelId),\n          middleware: [middleware],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n      return openaiCodexProvider(resolvedModelId.substring(OPENAI_PREFIX.length), {\n        thinkingLevel: this.#thinkingLevel,\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getOpenAIApiKey(this.#credentials);\n    if (apiKey) {\n      return openaiApiKeyProvider(args.modelId, apiKey, args.headers) as unknown as GatewayLanguageModel;\n    }\n\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAyCA,MAAa,gBAAgB;AAC7B,MAAa,wBAAwB;AACrC,MAAa,wBAAwB;AAErC,MAAM,4BAAoD;CACxD,WAAW;CACX,WAAW;CACX,WAAW;CACX,gBAAgB;CAChB,SAAS;AACX;AAqBA,MAAM,cAAc,IAAI,YAAY;AAEpC,SAAgB,oBAAoB;CAClC,YAAY,OAAO;AACrB;AAEA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,QAAQ,WAAA,SAAgC,IAAI,QAAQ,UAAU,CAA4B,IAAI;AACvG;AAEA,SAAS,0BAA0B,SAAyB;CAC1D,OAAO,QAAQ,QAAQ,aAAa,GAAG;AACzC;AAEA,SAAgB,8BAA8B,SAAyB;CACrE,MAAM,oBAAoB,yBAAyB,OAAO;CAE1D,IAAI,CAAC,kBAAkB,WAAA,SAAwB,GAC7C,OAAO;CAGT,MAAM,gBAAgB,kBAAkB,UAAU,CAAoB;CAEtE,IAAI,cAAc,SAAS,QAAQ,GACjC,OAAO;CAGT,MAAM,eAAe,0BAA0B;CAC/C,IAAI,CAAC,cACH,OAAO;CAGT,MAAM,kBAAkB,GAAG,gBAAgB;CAC3C,OAAO,QAAQ,WAAA,SAAgC,IAAI,GAAG,wBAAwB,oBAAoB;AACpG;;;;;AAMA,SAAgB,mBAAmB,cAA+B,aAAiC;CACjG,MAAM,aAAa,YAAY,IAAI,WAAW;CAC9C,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,WAAW,CAAC,EAAE,KAAK;CACpE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAC5C,KAAA,IACA,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAA;AAC/C;;;;;AAMA,SAAgB,gBAAgB,cAA+B,aAAiC;CAC9F,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAAQ,KAAA,IAAY,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC5G;AAEA,SAAS,wBACP,SACA,QACA,SACA,eACA;CACA,MAAM,YAAY,gBAAgB;EAAE;EAAQ;CAAQ,CAAC;CACrD,MAAM,qBAAqB,kCAAkC,SAAS,aAAa;CACnF,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB,YAAY,CAAC,uBAAuB,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC,CAAE;CACzF,CAAC;AACH;AAEA,SAAS,qBAAqB,SAAiB,QAAgB,SAA+B;CAE5F,OAAO,kBAAkB;EACvB,OAFa,aAAa;GAAE;GAAQ,SAAS,QAAQ,IAAI;GAAiB;EAAQ,CAEtE,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC;CACf,CAAC;AACH;AAEA,SAAS,kBAAkB,YAA4B;CACrD,OAAO,eAAe,WAAW,iBAAiB;AACpD;AAEA,SAAS,mBAAmB,YAAoB,cAA+B,aAAiC;CAC9G,MAAM,iBAAiB,kBAAkB,UAAU;CACnD,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,OAAO,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK,KAAK,KAAA;AAChE;AAEA,SAAgB,YAAY,SAA6B,qBAA6D;CACpH,OAAO,kBAAkB,oBAAoB,SAAS,mBAAmB;AAC3E;AAEA,SAAS,sBAAsB,WAAmB,YAA4B;CAC5E,IAAI,cAAc,cAAc,OAAO;CACvC,OAAO,eAAe,YAAY,YAAY,GAAG,UAAU,GAAG;AAChE;AAEA,SAAS,qBACP,UACA,SAC4D;CAC5D,MAAM,CAAC,YAAY,IAAI,aAAa,IAAI,GAAG,aAAa,SAAS,MAAM,GAAG;CAC1E,MAAM,YAAY,QAAQ;CAE1B,IAAI,cAAc,aAAa,YAC7B,OAAO;EACL;EACA,YAAY;EACZ,SAAS,UAAU,KAAK,GAAG;CAC7B;CAGF,OAAO;EACL;EACA,YAAY;EACZ,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG;CAC9D;AACF;AAEA,SAAS,gBAAgB,MAA8C;CACrE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,UAAU,KAAK,aAAa,OAAO;CAC5C,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI;AAC/D;AAEA,eAAe,2BACb,SACA,UACwC;CACxC,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAA;CAEjC,MAAM,SAAS,qBAAqB,UAAU,OAAO;CACrD,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,YAAY;GACvC,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB;EACF,CAAC;EACD,OAAO,gBAAgB,MAAM,IAAI,SAAS,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;AAEA,eAAe,6BACb,SACyC;CACzC,MAAM,YAA4C,EAAE,GAAI,kBAAqD;CAE7G,IAAI;EACF,MAAM,mBAAmB,MAAM,QAAQ,eAAe;EACtD,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QAAQ,gBAAgB,GAChE,UAAU,sBAAsB,QAAQ,IAAI,UAAU,KAAK;GACzD,GAAG;GACH,SAAS,QAAQ;EACnB;CAEJ,SAAS,OAAO;EACd,QAAQ,KAAK,yCAAyC,QAAQ,GAAG,IAAI,KAAK;CAC5E;CAEA,OAAO;AACT;AAEA,SAAS,gBAAgB,gBAAsF;CAC7G,MAAM,UAAU,gBAAgB;CAChC,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAC/C;AAEA,IAAa,oBAAb,MAAa,0BAA0B,mBAAmB;CACxD,KAAc;CACd,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,sBACA,qBACA,2BACA,eACA,iBACA,cACA,mBAC2B;EAC3B,MAAM;EACN,KAAKA,iBAAiB,IAAI,cAAc,EAAE,SAAS,qBAAqB,CAAC;EACzE,KAAKC,wBAAwB;EAC7B,KAAKC,uBAAuB;EAC5B,KAAKC,6BAA6B;EAClC,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKC,gBAAgB;EACrB,KAAKC,eAAe,mBAAmB;CACzC;CAEA,OAAO,yBAA6C;EAClD,OAAO,YAAY,gBAAA,gBAAuC,KAAK,QAAQ,IAAI;CAC7E;;CAGA,OAAO,yBAA6C;EAClD,OAAO,kBAAkB,uBAAuB;CAClD;;;;;;;CAQA,aAAa,SAA0B;EACrC,MAAM,SAAS,qBAAqB,SAAS,IAAI;EACjD,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,SAAS,OAAO;EAClD,IAAI,KAAKJ,8BAA8B,KAAKD,sBAAsB,OAAO;EAIzE,IAHuB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,OAAO,eAAe,oBAAoB,SAAS,IAAI,CAEpD,CAAC,EAAE,QAAQ,OAAO;EACnC,OAAO,gBACL,kBAAkB,oBAChB;GACE,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB,UAAU;EACZ,GACA,KAAA,GACA,KAAKD,YACP,CACF;CACF;CAEA,OAAO,oBACL,SACA,qBACA,cAA+B,aACA;EAC/B,IAAI,QAAQ,cAAc,YAAY,qBACpC,OAAO;GAAE,QAAQ;GAAqB,QAAQ;EAAU;EAI1D,IADmB,YAAY,IAAI,kBAAkB,QAAQ,UAAU,CAC1D,CAAC,EAAE,SAAS,SACvB,OAAO;GAAE,aAAa;GAAS,QAAQ;EAAU;EAGnD,MAAM,SAAS,mBAAmB,QAAQ,YAAY,WAAW;EACjE,OAAO,SAAS;GAAE;GAAQ,QAAQ;EAAU,IAAI,KAAA;CAClD;CAEA,OAAO,2BAA2B,SAAkE;EAClG,OAAO,YAAY;GACjB,MAAM,WAAW,MAAM,6BAA6B,OAAO;GAC3D,MAAM,SAAiC,CAAC;GAExC,KAAK,MAAM,CAAC,UAAU,mBAAmB,OAAO,QAAQ,QAAQ,GAAG;IACjE,MAAM,eAAe,gBAAgB,cAAc;IACnD,MAAM,YAAY,eAAe,QAAQ,QAAQ,IAAI,aAAa,IAAI;IACtE,MAAM,aAAa,eAAe;IAClC,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;IAEhC,MAAM,cAAc,WAAW,KAC3B,MAAM,2BAA2B,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI,IACxE,KAAA;IAEJ,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,KAAK,GAAG,SAAS,GAAG;KAC1B,OAAO,KAAK;MACV;MACA;MACA;MACA,WAAW,aAAa,QAAQ,WAAW;MAC3C,cAAc,gBAAgB,KAAA;KAChC,CAAC;IACH;GACF;GAEA,OAAO;EACT;CACF;CAEA,6BAAyD;EACvD,OAAO,kBAAkB,2BAA2B,IAAI;CAC1D;CAEA,sBAAkD;EAIhD,OAAO,KAAKF,oBAAoB,uBAAuB,KAAK,aAAa,KAAKC,aAAa,CAAC,CAAC;CAC/F;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,KAAK,MAAM,YAAY,KAAKE,oBAAoB,GAAG;GACjD,MAAM,SAAS,SAAS,UAAU,CAAC;GACnC,IAAI,CAAC,OAAO,QAAQ;GACpB,UAAU,oBAAoB,SAAS,IAAI,KAAK;IAC9C,MAAM,SAAS;IACf,KAAK,SAAS;IACd,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd;GACF;EACF;EAEA,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB,EAAE,YAAY,CAAC;GAClE,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EAEA,OAAO;CACT;CAEA,SAAS,SAAmE;EAC1E,OAAO,KAAKL,6BAA6B,KAAKH,eAAe,SAAS,OAAO,IAAI;CACnF;CAEA,MAAM,UAAU,SAAkC;EAChD,MAAM,aAAa,yBAAyB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;EACnE,IAAI,KAAKG,4BAA4B,OAAO,KAAKD,wBAAwB;EACzE,OAAO,aAAc,mBAAmB,YAAY,KAAKK,YAAY,KAAK,KAAM;CAClF;CAEA,YAAY,SAA4D;EACtE,IAAI,KAAKJ,8BAA8B,KAAKD,sBAC1C,OAAO;GAAE,QAAQ,KAAKA;GAAsB,QAAQ;EAAU;EAGhE,MAAM,iBAAiB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,QAAQ,eAAe,oBAAoB,SAAS,IAAI,CACtE;EACA,IAAI,gBAAgB,QAClB,OAAO;GAAE,QAAQ,eAAe;GAAQ,QAAQ;EAAU;EAG5D,OAAO,kBAAkB,oBAAoB,SAAS,KAAA,GAAW,KAAKD,YAAY;CACpF;CAEA,qBAAqB,MAOI;EACvB,MAAM,iBAAiB,KAAKC,oBAAoB,CAAC,CAAC,MAChD,aAAY,KAAK,eAAe,oBAAoB,SAAS,IAAI,CACnE;EACA,IAAI,gBAOF,OANiB,uBAAuB;GACtC,MAAM,KAAK;GACX,SAAS,eAAe;GACxB,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CACc,CAAC,CAAC,UAAU,KAAK,OAAO;EAGxC,IAAI,KAAK,eAAe,kBACtB,OAAO,sBAAsB,KAAK,SAAS;GACzC,SAAS,KAAK;GACd,aAAa,KAAKD;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,cAAc;GAIpC,MAAM,SACJ,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK;GACvG,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uBAAuB;GAEzC,OAAO,gBAAgB;IACrB;IACA,SAAS;IACT,MAAM;IACN,SAAS,KAAK;GAChB,CAAC,CAAC,CAAC,KAAK,OAAO;EACjB;EAEA,IAAI,KAAK,eAAe,aACtB,OAAO,KAAKE,uBAAuB,IAAI;EAGzC,IAAI,KAAK,eAAe,UAAU;GAChC,MAAM,cAAc,KAAKC,oBAAoB,IAAI;GACjD,IAAI,aAAa,OAAO;EAC1B;EAEA,IAAI,KAAK,eAAe,SAAS,KAAKH,aAAa,IAAI,KAAK,CAAC,EAAE,SAAS,SACtE,OAAO,YAAY,KAAK,SAAS;GAC/B,SAAS,KAAK;GACd,aAAa,KAAKA;EACpB,CAAC;EAGH,IAAI,KAAKJ,4BACP,OAAO,KAAKH,eAAe,qBAAqB,IAAI;EAGtD,OAAO,IAAI,yBAAyB;GAClC,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;CACH;CAEA,uBAAuB,MAOE;EACvB,MAAM,cAAc,0BAA0B,KAAK,OAAO;EAC1D,MAAM,aAAa,KAAKO,aAAa,IAAI,WAAW;EACpD,MAAM,qBAAqB,kCAAkC,aAAa,KAAKH,cAAc;EAE7F,IAAI,KAAKD,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAWvB,OAAO,kBAAkB;IACvB,OAXgB,gBAAgB;KAChC,QAAQ;KACR,SAAS,GAAG,KAAKF,sBAAsB;KACvC,SAAS;OACN,sBAAsB,UAAU,KAAK;MACtC,GAAG,KAAK;KACV;KACA,OAAO,yBAAyB,EAAE,aAAa,KAAKM,aAAa,CAAC;IACpE,CAGiB,CAAC,CAAC,WAAW;IAC5B,YAAY;KACV;KACA;KACA,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;IACnD;GACF,CAAC;GAGH,MAAM,eAAe,KAAKP,eAAe,qBAAqB;IAC5D,GAAG;IACH,SAAS;GACX,CAAC;GACD,IAAI,CAAC,oBAAoB,OAAO;GAChC,OAAO,kBAAkB;IACvB,OAAO;IACP,YAAY,CAAC,kBAAkB;GACjC,CAAC;EACH;EAEA,IAAI,YAAY,SAAS,SACvB,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKO;GAClB,eAAe,KAAKH;EACtB,CAAC;EAGH,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,wBACL,aACA,WAAW,IAAI,KAAK,GACpB,KAAK,SACL,KAAKA,cACP;EAGF,MAAM,SAAS,mBAAmB,KAAKG,YAAY;EACnD,IAAI,QACF,OAAO,wBACL,aACA,QACA,KAAK,SACL,KAAKH,cACP;EAIF,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKG;GAClB,eAAe,KAAKH;EACtB,CAAC;CACH;CAEA,oBAAoB,MAOiB;EACnC,MAAM,aAAa,KAAKG,aAAa,IAAI,cAAc;EAEvD,IAAI,KAAKJ,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAAS;IAEhC,MAAM,sBADkB,8BAA8B,UAAU,KAAK,SAC3B,CAAC,CAAC,UAAU,CAAoB;IAG1E,MAAM,kBAAkB,mCADD,0BAA0B,qBADX,KAAKC,kBAAkB,QAEW;IACxE,MAAM,aAAa,sBAAsB,eAAe;IAWxD,OAAO,kBAAkB;KACvB,OAXa,aAAa;MAC1B,QAAQ;MACR,SAAS,GAAG,KAAKH,sBAAsB;MACvC,SAAS;QACN,sBAAsB,UAAU,KAAK;OACtC,GAAG,KAAK;MACV;MACA,OAAO,2BAA2B;OAAE,aAAa,KAAKM;OAAc,YAAY;MAAM,CAAC;KACzF,CAGc,CAAC,CAAC,UAAU,mBAAmB;KAC3C,YAAY,CAAC,UAAU;IACzB,CAAC;GACH;GAEA,OAAO,KAAKP,eAAe,qBAAqB,IAAI;EACtD;EAEA,IAAI,YAAY,SAAS,SAEvB,OAAO,oBADiB,8BAA8B,UAAU,KAAK,SAC5B,CAAC,CAAC,UAAU,CAAoB,GAAG;GAC1E,eAAe,KAAKI;GACpB,SAAS,KAAK;GACd,aAAa,KAAKG;EACpB,CAAC;EAGH,MAAM,SAAS,gBAAgB,KAAKA,YAAY;EAChD,IAAI,QACF,OAAO,qBAAqB,KAAK,SAAS,QAAQ,KAAK,OAAO;CAIlE;AACF"}
+{"version":3,"file":"mastracode-gateway.js","names":["#mastraGateway","#mastraGatewayBaseUrl","#mastraGatewayApiKey","#routeThroughMastraGateway","#thinkingLevel","#customProviders","#settingsPath","#credentials","#getCustomProviders","#resolveAnthropicModel","#resolveOpenAIModel"],"sources":["../../src/agents/mastracode-gateway.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport { createOpenAI } from '@ai-sdk/openai';\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { CustomAvailableModel, CustomModelCatalogProvider } from '@mastra/core/agent-controller';\nimport {\n  GATEWAY_AUTH_HEADER,\n  MastraGateway,\n  MastraModelGateway,\n  ModelRouterLanguageModel,\n  PROVIDER_REGISTRY,\n} from '@mastra/core/llm';\nimport type {\n  GatewayAuthRequest,\n  GatewayAuthResult,\n  GatewayLanguageModel,\n  MastraModelGatewayInterface,\n  ProviderConfig,\n} from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { getCustomProviderId, loadSettings, MASTRA_GATEWAY_PROVIDER } from '../onboarding/settings.js';\nimport {\n  buildAnthropicOAuthFetch,\n  claudeCodeMiddleware,\n  createAnthropicThinkingMiddleware,\n  opencodeClaudeMaxProvider,\n  promptCacheMiddleware,\n} from '../providers/claude-max.js';\nimport { getCopilotModelCatalog, githubCopilotProvider } from '../providers/github-copilot.js';\nimport { KIMI_CODING_MODELS, kimiCodingProvider } from '../providers/kimi-coding.js';\nimport {\n  buildOpenAICodexOAuthFetch,\n  createCodexMiddleware,\n  getEffectiveThinkingLevel,\n  openaiCodexProvider,\n  THINKING_LEVEL_TO_REASONING_EFFORT,\n} from '../providers/openai-codex.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { xaiProvider } from '../providers/xai.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\n\nexport const OPENAI_PREFIX = 'openai/';\nexport const MASTRA_GATEWAY_PREFIX = 'mastra/';\nexport const MASTRACODE_GATEWAY_ID = 'mastracode';\n\nconst CODEX_OPENAI_MODEL_REMAPS: Record<string, string> = {\n  'gpt-5.3': 'gpt-5.3-codex',\n  'gpt-5.2': 'gpt-5.2-codex',\n  'gpt-5.1': 'gpt-5.1-codex',\n  'gpt-5.1-mini': 'gpt-5.1-codex-mini',\n  'gpt-5': 'gpt-5-codex',\n};\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport type MastraCodeCustomProvider = { name: string; url: string; apiKey?: string; models?: string[] };\n\nexport type MastraCodeGatewayOptions = {\n  mastraGatewayBaseUrl: string;\n  mastraGatewayApiKey?: string;\n  routeThroughMastraGateway: boolean;\n  thinkingLevel?: ThinkingLevel;\n  customProviders?: MastraCodeCustomProvider[];\n  settingsPath?: string;\n  /**\n   * Per-tenant credential source for this gateway instance. Defaults to the\n   * server-global file-backed `AuthStorage`; deployed web passes the calling\n   * tenant's store so model calls use the caller's own credentials.\n   */\n  credentialStore?: CredentialStore;\n};\n\nconst authStorage = new AuthStorage();\n\nexport function reloadAuthStorage() {\n  authStorage.reload();\n}\n\nexport function stripMastraGatewayPrefix(modelId: string): string {\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? modelId.substring(MASTRA_GATEWAY_PREFIX.length) : modelId;\n}\n\nfunction normalizeAnthropicModelId(modelId: string): string {\n  return modelId.replace(/\\.(?=\\d)/g, '-');\n}\n\nexport function remapOpenAIModelForCodexOAuth(modelId: string): string {\n  const normalizedModelId = stripMastraGatewayPrefix(modelId);\n\n  if (!normalizedModelId.startsWith(OPENAI_PREFIX)) {\n    return modelId;\n  }\n\n  const openaiModelId = normalizedModelId.substring(OPENAI_PREFIX.length);\n\n  if (openaiModelId.includes('-codex')) {\n    return modelId;\n  }\n\n  const codexModelId = CODEX_OPENAI_MODEL_REMAPS[openaiModelId];\n  if (!codexModelId) {\n    return modelId;\n  }\n\n  const remappedModelId = `${OPENAI_PREFIX}${codexModelId}`;\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? `${MASTRA_GATEWAY_PREFIX}${remappedModelId}` : remappedModelId;\n}\n\n/**\n * Resolve the Anthropic API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getAnthropicApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('anthropic');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('anthropic')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false\n    ? undefined\n    : process.env.ANTHROPIC_API_KEY?.trim() || undefined;\n}\n\n/**\n * Resolve the OpenAI API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getOpenAIApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('openai-codex');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('openai-codex')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false ? undefined : process.env.OPENAI_API_KEY?.trim() || undefined;\n}\n\nfunction anthropicApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers?: ModelRequestHeaders,\n  thinkingLevel?: ThinkingLevel,\n) {\n  const anthropic = createAnthropic({ apiKey, headers });\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, thinkingLevel);\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [promptCacheMiddleware, ...(thinkingMiddleware ? [thinkingMiddleware] : [])],\n  });\n}\n\nfunction openaiApiKeyProvider(modelId: string, apiKey: string, headers?: ModelRequestHeaders) {\n  const openai = createOpenAI({ apiKey, baseURL: process.env.OPENAI_BASE_URL, headers });\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [],\n  });\n}\n\nfunction getAuthProviderId(providerId: string): string {\n  return providerId === 'openai' ? 'openai-codex' : providerId;\n}\n\nfunction getProviderAuthKey(providerId: string, credentials: CredentialStore = authStorage): string | undefined {\n  const authProviderId = getAuthProviderId(providerId);\n  const storedCred = credentials.get(authProviderId);\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey(authProviderId)?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  if (credentials.allowEnvironmentFallback === false) return undefined;\n  return authProviderId === 'kimi-for-coding' ? process.env.KIMI_API_KEY?.trim() || undefined : undefined;\n}\n\nexport function resolveAuth(request: GatewayAuthRequest, mastraGatewayApiKey?: string): GatewayAuthResult | undefined {\n  return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);\n}\n\nfunction getGatewayProviderKey(gatewayId: string, providerId: string): string {\n  if (gatewayId === 'models.dev') return providerId;\n  return providerId === gatewayId ? gatewayId : `${gatewayId}/${providerId}`;\n}\n\nfunction parseGatewayRouterId(\n  routerId: string,\n  gateway: MastraModelGatewayInterface,\n): { gatewayId: string; providerId: string; modelId: string } {\n  const [firstPart = '', secondPart = '', ...restParts] = routerId.split('/');\n  const gatewayId = gateway.id;\n\n  if (firstPart === gatewayId && secondPart) {\n    return {\n      gatewayId,\n      providerId: secondPart,\n      modelId: restParts.join('/'),\n    };\n  }\n\n  return {\n    gatewayId,\n    providerId: firstPart,\n    modelId: [secondPart, ...restParts].filter(Boolean).join('/'),\n  };\n}\n\nfunction hasResolvedAuth(auth: GatewayAuthResult | undefined): boolean {\n  if (!auth) return false;\n  if (auth.apiKey || auth.bearerToken) return true;\n  return auth.headers ? Object.keys(auth.headers).length > 0 : false;\n}\n\nasync function resolveGatewayProviderAuth(\n  gateway: MastraModelGatewayInterface,\n  routerId: string,\n): Promise<GatewayAuthResult | undefined> {\n  if (!gateway.resolveAuth) return undefined;\n\n  const parsed = parseGatewayRouterId(routerId, gateway);\n  try {\n    const result = await gateway.resolveAuth({\n      gatewayId: parsed.gatewayId,\n      providerId: parsed.providerId,\n      modelId: parsed.modelId,\n      routerId,\n    });\n    return hasResolvedAuth(result) ? result : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getMastraCodeProviderConfigs(\n  gateway: MastraModelGatewayInterface,\n): Promise<Record<string, ProviderConfig>> {\n  const providers: Record<string, ProviderConfig> = { ...(PROVIDER_REGISTRY as Record<string, ProviderConfig>) };\n\n  try {\n    const gatewayProviders = await gateway.fetchProviders();\n    for (const [providerId, config] of Object.entries(gatewayProviders)) {\n      providers[getGatewayProviderKey(gateway.id, providerId)] = {\n        ...config,\n        gateway: gateway.id,\n      };\n    }\n  } catch (error) {\n    console.warn(`Failed to load providers from gateway ${gateway.id}:`, error);\n  }\n\n  return providers;\n}\n\nfunction getApiKeyEnvVar(providerConfig: Pick<ProviderConfig, 'apiKeyEnvVar'> | undefined): string | undefined {\n  const envVars = providerConfig?.apiKeyEnvVar;\n  return Array.isArray(envVars) ? envVars[0] : envVars;\n}\n\nexport class MastraCodeGateway extends MastraModelGateway {\n  readonly id = MASTRACODE_GATEWAY_ID;\n  readonly name = 'MastraCode Gateway';\n\n  readonly #mastraGateway: MastraGateway;\n  readonly #mastraGatewayBaseUrl: string;\n  readonly #mastraGatewayApiKey?: string;\n  readonly #routeThroughMastraGateway: boolean;\n  readonly #thinkingLevel?: ThinkingLevel;\n  readonly #customProviders?: MastraCodeCustomProvider[];\n  readonly #settingsPath?: string;\n  readonly #credentials: CredentialStore;\n\n  constructor({\n    mastraGatewayBaseUrl,\n    mastraGatewayApiKey,\n    routeThroughMastraGateway,\n    thinkingLevel,\n    customProviders,\n    settingsPath,\n    credentialStore,\n  }: MastraCodeGatewayOptions) {\n    super();\n    this.#mastraGateway = new MastraGateway({ baseUrl: mastraGatewayBaseUrl });\n    this.#mastraGatewayBaseUrl = mastraGatewayBaseUrl;\n    this.#mastraGatewayApiKey = mastraGatewayApiKey;\n    this.#routeThroughMastraGateway = routeThroughMastraGateway;\n    this.#thinkingLevel = thinkingLevel;\n    this.#customProviders = customProviders;\n    this.#settingsPath = settingsPath;\n    this.#credentials = credentialStore ?? authStorage;\n  }\n\n  static getMastraGatewayApiKey(): string | undefined {\n    return authStorage.getStoredApiKey(MASTRA_GATEWAY_PROVIDER) ?? process.env['MASTRA_GATEWAY_API_KEY'];\n  }\n\n  /** @deprecated Renamed to {@link MastraCodeGateway.getMastraGatewayApiKey}. */\n  static getMemoryGatewayApiKey(): string | undefined {\n    return MastraCodeGateway.getMastraGatewayApiKey();\n  }\n\n  /**\n   * Claim an unprefixed model id (e.g. a bare `anthropic/...`) when this gateway\n   * can authenticate it via OAuth or a stored/env credential. This lets the\n   * shared gateway router select MastraCode for auth resolution, so the status\n   * bar and `/api-keys` reflect OAuth logins instead of only checking env vars.\n   */\n  handlesModel(modelId: string): boolean {\n    const parsed = parseGatewayRouterId(modelId, this);\n    if (!parsed.providerId || !parsed.modelId) return false;\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) return true;\n    const customProvider = this.#getCustomProviders().find(\n      provider => parsed.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) return true;\n    return hasResolvedAuth(\n      MastraCodeGateway.resolveProviderAuth(\n        {\n          gatewayId: this.id,\n          providerId: parsed.providerId,\n          modelId: parsed.modelId,\n          routerId: modelId,\n        },\n        undefined,\n        this.#credentials,\n      ),\n    );\n  }\n\n  static resolveProviderAuth(\n    request: GatewayAuthRequest,\n    mastraGatewayApiKey?: string,\n    credentials: CredentialStore = authStorage,\n  ): GatewayAuthResult | undefined {\n    if (request.gatewayId === 'mastra' && mastraGatewayApiKey) {\n      return { apiKey: mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const authProviderId = getAuthProviderId(request.providerId);\n    const storedCred = credentials.get(authProviderId);\n    if (storedCred?.type === 'oauth') {\n      return { bearerToken: 'oauth', source: 'gateway' };\n    }\n\n    const apiKey = getProviderAuthKey(request.providerId, credentials);\n    return apiKey ? { apiKey, source: 'gateway' } : undefined;\n  }\n\n  static createModelCatalogProvider(gateway: MastraModelGatewayInterface): CustomModelCatalogProvider {\n    return async () => {\n      const registry = await getMastraCodeProviderConfigs(gateway);\n      const models: CustomAvailableModel[] = [];\n\n      for (const [provider, providerConfig] of Object.entries(registry)) {\n        const apiKeyEnvVar = getApiKeyEnvVar(providerConfig);\n        const hasEnvKey = apiKeyEnvVar ? Boolean(process.env[apiKeyEnvVar]) : false;\n        const modelNames = providerConfig.models;\n        if (!Array.isArray(modelNames)) continue;\n\n        const gatewayAuth = modelNames[0]\n          ? await resolveGatewayProviderAuth(gateway, `${provider}/${modelNames[0]}`)\n          : undefined;\n\n        for (const modelName of modelNames) {\n          const id = `${provider}/${modelName}`;\n          models.push({\n            id,\n            provider,\n            modelName,\n            hasApiKey: hasEnvKey || Boolean(gatewayAuth),\n            apiKeyEnvVar: apiKeyEnvVar || undefined,\n          });\n        }\n      }\n\n      return models;\n    };\n  }\n\n  createModelCatalogProvider(): CustomModelCatalogProvider {\n    return MastraCodeGateway.createModelCatalogProvider(this);\n  }\n\n  #getCustomProviders(): MastraCodeCustomProvider[] {\n    // Explicit constructor list wins; then a registered source (deployed web,\n    // DB-backed — authoritative, so settings.json is never consulted); then\n    // the local file-backed settings.\n    return this.#customProviders ?? resolveCustomProviders() ?? loadSettings(this.#settingsPath).customProviders;\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    for (const provider of this.#getCustomProviders()) {\n      const models = provider.models ?? [];\n      if (!models.length) continue;\n      providers[getCustomProviderId(provider.name)] = {\n        name: provider.name,\n        url: provider.url,\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models,\n      };\n    }\n\n    providers['kimi-for-coding'] = {\n      name: 'Kimi For Coding',\n      apiKeyEnvVar: 'KIMI_API_KEY',\n      apiKeyHeader: 'Authorization',\n      gateway: this.id,\n      models: [...KIMI_CODING_MODELS],\n    };\n\n    try {\n      const copilotModels = await getCopilotModelCatalog({ authStorage });\n      providers['github-copilot'] = {\n        name: 'GitHub Copilot',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: copilotModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load GitHub Copilot model catalog:', error);\n    }\n\n    return providers;\n  }\n\n  buildUrl(modelId: string): string | undefined | Promise<string | undefined> {\n    return this.#routeThroughMastraGateway ? this.#mastraGateway.buildUrl(modelId) : modelId;\n  }\n\n  async getApiKey(modelId: string): Promise<string> {\n    const providerId = stripMastraGatewayPrefix(modelId).split('/', 1)[0];\n    if (this.#routeThroughMastraGateway) return this.#mastraGatewayApiKey ?? '';\n    return providerId ? (getProviderAuthKey(providerId, this.#credentials) ?? '') : '';\n  }\n\n  resolveAuth(request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) {\n      return { apiKey: this.#mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const customProvider = this.#getCustomProviders().find(\n      provider => request.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) {\n      return { apiKey: customProvider.apiKey, source: 'gateway' };\n    }\n\n    return MastraCodeGateway.resolveProviderAuth(request, undefined, this.#credentials);\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const customProvider = this.#getCustomProviders().find(\n      provider => args.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider) {\n      const provider = createOpenAICompatible({\n        name: args.providerId,\n        baseURL: customProvider.url,\n        apiKey: args.apiKey,\n        headers: args.headers,\n      });\n      return provider.chatModel(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'github-copilot') {\n      return githubCopilotProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'moonshotai') {\n      // Prefer the gateway-resolved key (stored credentials), then the canonical\n      // registry env var. Keep the legacy typo name as a fallback for anyone who\n      // set it because of the previous error message.\n      const apiKey =\n        args.apiKey?.trim() || process.env.MOONSHOT_API_KEY?.trim() || process.env.MOONSHOT_AI_API_KEY?.trim();\n      if (!apiKey) {\n        throw new Error('Need MOONSHOT_API_KEY');\n      }\n      return createAnthropic({\n        apiKey,\n        baseURL: 'https://api.moonshot.ai/anthropic/v1',\n        name: 'moonshotai.anthropicv1',\n        headers: args.headers,\n      })(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'anthropic') {\n      return this.#resolveAnthropicModel(args);\n    }\n\n    if (args.providerId === 'openai') {\n      const openaiModel = this.#resolveOpenAIModel(args);\n      if (openaiModel) return openaiModel;\n    }\n\n    if (args.providerId === 'xai' && this.#credentials.get('xai')?.type === 'oauth') {\n      return xaiProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (this.#routeThroughMastraGateway) {\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'kimi-for-coding') {\n      return kimiCodingProvider(args.modelId, {\n        apiKey: args.apiKey,\n        headers: args.headers,\n        credentialStore: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    return new ModelRouterLanguageModel({\n      id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n      apiKey: args.apiKey,\n      headers: args.headers,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveAnthropicModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const bareModelId = normalizeAnthropicModelId(args.modelId);\n    const storedCred = this.#credentials.get('anthropic');\n    const thinkingMiddleware = createAnthropicThinkingMiddleware(bareModelId, this.#thinkingLevel);\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const anthropic = createAnthropic({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildAnthropicOAuthFetch({ authStorage: this.#credentials }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: anthropic(bareModelId),\n          middleware: [\n            claudeCodeMiddleware,\n            promptCacheMiddleware,\n            ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n          ],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      const gatewayModel = this.#mastraGateway.resolveLanguageModel({\n        ...args,\n        modelId: bareModelId,\n      }) as GatewayLanguageModel;\n      if (!thinkingMiddleware) return gatewayModel;\n      return wrapLanguageModel({\n        model: gatewayModel as any,\n        middleware: [thinkingMiddleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      return opencodeClaudeMaxProvider(bareModelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n        thinkingLevel: this.#thinkingLevel,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        storedCred.key.trim(),\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getAnthropicApiKey(this.#credentials);\n    if (apiKey) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    // No stored credentials: use the OAuth-backed provider so the first request can trigger login.\n    return opencodeClaudeMaxProvider(bareModelId, {\n      headers: args.headers,\n      authStorage: this.#credentials,\n      thinkingLevel: this.#thinkingLevel,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveOpenAIModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel | undefined {\n    const storedCred = this.#credentials.get('openai-codex');\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n        const resolvedBareModelId = resolvedModelId.substring(OPENAI_PREFIX.length);\n        const requestedLevel: ThinkingLevel = this.#thinkingLevel ?? 'medium';\n        const effectiveLevel = getEffectiveThinkingLevel(resolvedBareModelId, requestedLevel);\n        const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n        const middleware = createCodexMiddleware(reasoningEffort);\n        const openai = createOpenAI({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildOpenAICodexOAuthFetch({ authStorage: this.#credentials, rewriteUrl: false }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: openai.responses(resolvedBareModelId),\n          middleware: [middleware],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n      return openaiCodexProvider(resolvedModelId.substring(OPENAI_PREFIX.length), {\n        thinkingLevel: this.#thinkingLevel,\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getOpenAIApiKey(this.#credentials);\n    if (apiKey) {\n      return openaiApiKeyProvider(args.modelId, apiKey, args.headers) as unknown as GatewayLanguageModel;\n    }\n\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA0CA,MAAa,gBAAgB;AAC7B,MAAa,wBAAwB;AACrC,MAAa,wBAAwB;AAErC,MAAM,4BAAoD;CACxD,WAAW;CACX,WAAW;CACX,WAAW;CACX,gBAAgB;CAChB,SAAS;AACX;AAqBA,MAAM,cAAc,IAAI,YAAY;AAEpC,SAAgB,oBAAoB;CAClC,YAAY,OAAO;AACrB;AAEA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,QAAQ,WAAA,SAAgC,IAAI,QAAQ,UAAU,CAA4B,IAAI;AACvG;AAEA,SAAS,0BAA0B,SAAyB;CAC1D,OAAO,QAAQ,QAAQ,aAAa,GAAG;AACzC;AAEA,SAAgB,8BAA8B,SAAyB;CACrE,MAAM,oBAAoB,yBAAyB,OAAO;CAE1D,IAAI,CAAC,kBAAkB,WAAA,SAAwB,GAC7C,OAAO;CAGT,MAAM,gBAAgB,kBAAkB,UAAU,CAAoB;CAEtE,IAAI,cAAc,SAAS,QAAQ,GACjC,OAAO;CAGT,MAAM,eAAe,0BAA0B;CAC/C,IAAI,CAAC,cACH,OAAO;CAGT,MAAM,kBAAkB,GAAG,gBAAgB;CAC3C,OAAO,QAAQ,WAAA,SAAgC,IAAI,GAAG,wBAAwB,oBAAoB;AACpG;;;;;AAMA,SAAgB,mBAAmB,cAA+B,aAAiC;CACjG,MAAM,aAAa,YAAY,IAAI,WAAW;CAC9C,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,WAAW,CAAC,EAAE,KAAK;CACpE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAC5C,KAAA,IACA,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAA;AAC/C;;;;;AAMA,SAAgB,gBAAgB,cAA+B,aAAiC;CAC9F,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAAQ,KAAA,IAAY,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC5G;AAEA,SAAS,wBACP,SACA,QACA,SACA,eACA;CACA,MAAM,YAAY,gBAAgB;EAAE;EAAQ;CAAQ,CAAC;CACrD,MAAM,qBAAqB,kCAAkC,SAAS,aAAa;CACnF,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB,YAAY,CAAC,uBAAuB,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC,CAAE;CACzF,CAAC;AACH;AAEA,SAAS,qBAAqB,SAAiB,QAAgB,SAA+B;CAE5F,OAAO,kBAAkB;EACvB,OAFa,aAAa;GAAE;GAAQ,SAAS,QAAQ,IAAI;GAAiB;EAAQ,CAEtE,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC;CACf,CAAC;AACH;AAEA,SAAS,kBAAkB,YAA4B;CACrD,OAAO,eAAe,WAAW,iBAAiB;AACpD;AAEA,SAAS,mBAAmB,YAAoB,cAA+B,aAAiC;CAC9G,MAAM,iBAAiB,kBAAkB,UAAU;CACnD,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,IAAI,YAAY,6BAA6B,OAAO,OAAO,KAAA;CAC3D,OAAO,mBAAmB,oBAAoB,QAAQ,IAAI,cAAc,KAAK,KAAK,KAAA,IAAY,KAAA;AAChG;AAEA,SAAgB,YAAY,SAA6B,qBAA6D;CACpH,OAAO,kBAAkB,oBAAoB,SAAS,mBAAmB;AAC3E;AAEA,SAAS,sBAAsB,WAAmB,YAA4B;CAC5E,IAAI,cAAc,cAAc,OAAO;CACvC,OAAO,eAAe,YAAY,YAAY,GAAG,UAAU,GAAG;AAChE;AAEA,SAAS,qBACP,UACA,SAC4D;CAC5D,MAAM,CAAC,YAAY,IAAI,aAAa,IAAI,GAAG,aAAa,SAAS,MAAM,GAAG;CAC1E,MAAM,YAAY,QAAQ;CAE1B,IAAI,cAAc,aAAa,YAC7B,OAAO;EACL;EACA,YAAY;EACZ,SAAS,UAAU,KAAK,GAAG;CAC7B;CAGF,OAAO;EACL;EACA,YAAY;EACZ,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG;CAC9D;AACF;AAEA,SAAS,gBAAgB,MAA8C;CACrE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,UAAU,KAAK,aAAa,OAAO;CAC5C,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI;AAC/D;AAEA,eAAe,2BACb,SACA,UACwC;CACxC,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAA;CAEjC,MAAM,SAAS,qBAAqB,UAAU,OAAO;CACrD,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,YAAY;GACvC,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB;EACF,CAAC;EACD,OAAO,gBAAgB,MAAM,IAAI,SAAS,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;AAEA,eAAe,6BACb,SACyC;CACzC,MAAM,YAA4C,EAAE,GAAI,kBAAqD;CAE7G,IAAI;EACF,MAAM,mBAAmB,MAAM,QAAQ,eAAe;EACtD,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QAAQ,gBAAgB,GAChE,UAAU,sBAAsB,QAAQ,IAAI,UAAU,KAAK;GACzD,GAAG;GACH,SAAS,QAAQ;EACnB;CAEJ,SAAS,OAAO;EACd,QAAQ,KAAK,yCAAyC,QAAQ,GAAG,IAAI,KAAK;CAC5E;CAEA,OAAO;AACT;AAEA,SAAS,gBAAgB,gBAAsF;CAC7G,MAAM,UAAU,gBAAgB;CAChC,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAC/C;AAEA,IAAa,oBAAb,MAAa,0BAA0B,mBAAmB;CACxD,KAAc;CACd,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,sBACA,qBACA,2BACA,eACA,iBACA,cACA,mBAC2B;EAC3B,MAAM;EACN,KAAKA,iBAAiB,IAAI,cAAc,EAAE,SAAS,qBAAqB,CAAC;EACzE,KAAKC,wBAAwB;EAC7B,KAAKC,uBAAuB;EAC5B,KAAKC,6BAA6B;EAClC,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKC,gBAAgB;EACrB,KAAKC,eAAe,mBAAmB;CACzC;CAEA,OAAO,yBAA6C;EAClD,OAAO,YAAY,gBAAA,gBAAuC,KAAK,QAAQ,IAAI;CAC7E;;CAGA,OAAO,yBAA6C;EAClD,OAAO,kBAAkB,uBAAuB;CAClD;;;;;;;CAQA,aAAa,SAA0B;EACrC,MAAM,SAAS,qBAAqB,SAAS,IAAI;EACjD,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,SAAS,OAAO;EAClD,IAAI,KAAKJ,8BAA8B,KAAKD,sBAAsB,OAAO;EAIzE,IAHuB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,OAAO,eAAe,oBAAoB,SAAS,IAAI,CAEpD,CAAC,EAAE,QAAQ,OAAO;EACnC,OAAO,gBACL,kBAAkB,oBAChB;GACE,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB,UAAU;EACZ,GACA,KAAA,GACA,KAAKD,YACP,CACF;CACF;CAEA,OAAO,oBACL,SACA,qBACA,cAA+B,aACA;EAC/B,IAAI,QAAQ,cAAc,YAAY,qBACpC,OAAO;GAAE,QAAQ;GAAqB,QAAQ;EAAU;EAG1D,MAAM,iBAAiB,kBAAkB,QAAQ,UAAU;EAE3D,IADmB,YAAY,IAAI,cACtB,CAAC,EAAE,SAAS,SACvB,OAAO;GAAE,aAAa;GAAS,QAAQ;EAAU;EAGnD,MAAM,SAAS,mBAAmB,QAAQ,YAAY,WAAW;EACjE,OAAO,SAAS;GAAE;GAAQ,QAAQ;EAAU,IAAI,KAAA;CAClD;CAEA,OAAO,2BAA2B,SAAkE;EAClG,OAAO,YAAY;GACjB,MAAM,WAAW,MAAM,6BAA6B,OAAO;GAC3D,MAAM,SAAiC,CAAC;GAExC,KAAK,MAAM,CAAC,UAAU,mBAAmB,OAAO,QAAQ,QAAQ,GAAG;IACjE,MAAM,eAAe,gBAAgB,cAAc;IACnD,MAAM,YAAY,eAAe,QAAQ,QAAQ,IAAI,aAAa,IAAI;IACtE,MAAM,aAAa,eAAe;IAClC,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;IAEhC,MAAM,cAAc,WAAW,KAC3B,MAAM,2BAA2B,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI,IACxE,KAAA;IAEJ,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,KAAK,GAAG,SAAS,GAAG;KAC1B,OAAO,KAAK;MACV;MACA;MACA;MACA,WAAW,aAAa,QAAQ,WAAW;MAC3C,cAAc,gBAAgB,KAAA;KAChC,CAAC;IACH;GACF;GAEA,OAAO;EACT;CACF;CAEA,6BAAyD;EACvD,OAAO,kBAAkB,2BAA2B,IAAI;CAC1D;CAEA,sBAAkD;EAIhD,OAAO,KAAKF,oBAAoB,uBAAuB,KAAK,aAAa,KAAKC,aAAa,CAAC,CAAC;CAC/F;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,KAAK,MAAM,YAAY,KAAKE,oBAAoB,GAAG;GACjD,MAAM,SAAS,SAAS,UAAU,CAAC;GACnC,IAAI,CAAC,OAAO,QAAQ;GACpB,UAAU,oBAAoB,SAAS,IAAI,KAAK;IAC9C,MAAM,SAAS;IACf,KAAK,SAAS;IACd,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd;GACF;EACF;EAEA,UAAU,qBAAqB;GAC7B,MAAM;GACN,cAAc;GACd,cAAc;GACd,SAAS,KAAK;GACd,QAAQ,CAAC,GAAG,kBAAkB;EAChC;EAEA,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB,EAAE,YAAY,CAAC;GAClE,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EAEA,OAAO;CACT;CAEA,SAAS,SAAmE;EAC1E,OAAO,KAAKL,6BAA6B,KAAKH,eAAe,SAAS,OAAO,IAAI;CACnF;CAEA,MAAM,UAAU,SAAkC;EAChD,MAAM,aAAa,yBAAyB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;EACnE,IAAI,KAAKG,4BAA4B,OAAO,KAAKD,wBAAwB;EACzE,OAAO,aAAc,mBAAmB,YAAY,KAAKK,YAAY,KAAK,KAAM;CAClF;CAEA,YAAY,SAA4D;EACtE,IAAI,KAAKJ,8BAA8B,KAAKD,sBAC1C,OAAO;GAAE,QAAQ,KAAKA;GAAsB,QAAQ;EAAU;EAGhE,MAAM,iBAAiB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,QAAQ,eAAe,oBAAoB,SAAS,IAAI,CACtE;EACA,IAAI,gBAAgB,QAClB,OAAO;GAAE,QAAQ,eAAe;GAAQ,QAAQ;EAAU;EAG5D,OAAO,kBAAkB,oBAAoB,SAAS,KAAA,GAAW,KAAKD,YAAY;CACpF;CAEA,qBAAqB,MAOI;EACvB,MAAM,iBAAiB,KAAKC,oBAAoB,CAAC,CAAC,MAChD,aAAY,KAAK,eAAe,oBAAoB,SAAS,IAAI,CACnE;EACA,IAAI,gBAOF,OANiB,uBAAuB;GACtC,MAAM,KAAK;GACX,SAAS,eAAe;GACxB,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CACc,CAAC,CAAC,UAAU,KAAK,OAAO;EAGxC,IAAI,KAAK,eAAe,kBACtB,OAAO,sBAAsB,KAAK,SAAS;GACzC,SAAS,KAAK;GACd,aAAa,KAAKD;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,cAAc;GAIpC,MAAM,SACJ,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK;GACvG,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uBAAuB;GAEzC,OAAO,gBAAgB;IACrB;IACA,SAAS;IACT,MAAM;IACN,SAAS,KAAK;GAChB,CAAC,CAAC,CAAC,KAAK,OAAO;EACjB;EAEA,IAAI,KAAK,eAAe,aACtB,OAAO,KAAKE,uBAAuB,IAAI;EAGzC,IAAI,KAAK,eAAe,UAAU;GAChC,MAAM,cAAc,KAAKC,oBAAoB,IAAI;GACjD,IAAI,aAAa,OAAO;EAC1B;EAEA,IAAI,KAAK,eAAe,SAAS,KAAKH,aAAa,IAAI,KAAK,CAAC,EAAE,SAAS,SACtE,OAAO,YAAY,KAAK,SAAS;GAC/B,SAAS,KAAK;GACd,aAAa,KAAKA;EACpB,CAAC;EAGH,IAAI,KAAKJ,4BACP,OAAO,KAAKH,eAAe,qBAAqB,IAAI;EAGtD,IAAI,KAAK,eAAe,mBACtB,OAAO,mBAAmB,KAAK,SAAS;GACtC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,iBAAiB,KAAKO;EACxB,CAAC;EAGH,OAAO,IAAI,yBAAyB;GAClC,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;CACH;CAEA,uBAAuB,MAOE;EACvB,MAAM,cAAc,0BAA0B,KAAK,OAAO;EAC1D,MAAM,aAAa,KAAKA,aAAa,IAAI,WAAW;EACpD,MAAM,qBAAqB,kCAAkC,aAAa,KAAKH,cAAc;EAE7F,IAAI,KAAKD,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAWvB,OAAO,kBAAkB;IACvB,OAXgB,gBAAgB;KAChC,QAAQ;KACR,SAAS,GAAG,KAAKF,sBAAsB;KACvC,SAAS;OACN,sBAAsB,UAAU,KAAK;MACtC,GAAG,KAAK;KACV;KACA,OAAO,yBAAyB,EAAE,aAAa,KAAKM,aAAa,CAAC;IACpE,CAGiB,CAAC,CAAC,WAAW;IAC5B,YAAY;KACV;KACA;KACA,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;IACnD;GACF,CAAC;GAGH,MAAM,eAAe,KAAKP,eAAe,qBAAqB;IAC5D,GAAG;IACH,SAAS;GACX,CAAC;GACD,IAAI,CAAC,oBAAoB,OAAO;GAChC,OAAO,kBAAkB;IACvB,OAAO;IACP,YAAY,CAAC,kBAAkB;GACjC,CAAC;EACH;EAEA,IAAI,YAAY,SAAS,SACvB,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKO;GAClB,eAAe,KAAKH;EACtB,CAAC;EAGH,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,wBACL,aACA,WAAW,IAAI,KAAK,GACpB,KAAK,SACL,KAAKA,cACP;EAGF,MAAM,SAAS,mBAAmB,KAAKG,YAAY;EACnD,IAAI,QACF,OAAO,wBACL,aACA,QACA,KAAK,SACL,KAAKH,cACP;EAIF,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKG;GAClB,eAAe,KAAKH;EACtB,CAAC;CACH;CAEA,oBAAoB,MAOiB;EACnC,MAAM,aAAa,KAAKG,aAAa,IAAI,cAAc;EAEvD,IAAI,KAAKJ,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAAS;IAEhC,MAAM,sBADkB,8BAA8B,UAAU,KAAK,SAC3B,CAAC,CAAC,UAAU,CAAoB;IAG1E,MAAM,kBAAkB,mCADD,0BAA0B,qBADX,KAAKC,kBAAkB,QAEW;IACxE,MAAM,aAAa,sBAAsB,eAAe;IAWxD,OAAO,kBAAkB;KACvB,OAXa,aAAa;MAC1B,QAAQ;MACR,SAAS,GAAG,KAAKH,sBAAsB;MACvC,SAAS;QACN,sBAAsB,UAAU,KAAK;OACtC,GAAG,KAAK;MACV;MACA,OAAO,2BAA2B;OAAE,aAAa,KAAKM;OAAc,YAAY;MAAM,CAAC;KACzF,CAGc,CAAC,CAAC,UAAU,mBAAmB;KAC3C,YAAY,CAAC,UAAU;IACzB,CAAC;GACH;GAEA,OAAO,KAAKP,eAAe,qBAAqB,IAAI;EACtD;EAEA,IAAI,YAAY,SAAS,SAEvB,OAAO,oBADiB,8BAA8B,UAAU,KAAK,SAC5B,CAAC,CAAC,UAAU,CAAoB,GAAG;GAC1E,eAAe,KAAKI;GACpB,SAAS,KAAK;GACd,aAAa,KAAKG;EACpB,CAAC;EAGH,MAAM,SAAS,gBAAgB,KAAKA,YAAY;EAChD,IAAI,QACF,OAAO,qBAAqB,KAAK,SAAS,QAAQ,KAAK,OAAO;CAIlE;AACF"}

package/dist/agents/memory.d.ts

@@ -2,6 +2,12 @@ import type { RequestContext } from '@mastra/core/request-context';
 import type { MastraCompositeStore } from '@mastra/core/storage';
 import type { MastraVector } from '@mastra/core/vector';
 import { Memory } from '@mastra/memory';
+/**
+ * The organization rung local (TUI/studio) knowledge is captured under. A fixed
+ * literal on purpose: deriving it from a hostname or path would fragment local
+ * knowledge per checkout into scopes nothing ever reads.
+ */
+export declare const LOCAL_KNOWLEDGE_ORG_ID = "local";
 /**
  * Dynamic memory factory function.
  * Reads OM thresholds from controller state via requestContext.

package/dist/agents/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/agents/memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,MAAM,EAAgB,MAAM,gBAAgB,CAAC;AAkEtD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,YAAY,IAM3E,oBAAoB;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,YAyG/D"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/agents/memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,MAAM,EAAgB,MAAM,gBAAgB,CAAC;AAkEtD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,UAAU,CAAC;AA6B9C;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,YAAY,IAM3E,oBAAoB;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,YAmH/D"}

package/dist/agents/memory.js

@@ -55,6 +55,24 @@ Don't say "Agent did x", say "did x". It will be assumed the agent did what was
 
 Drop caveman for: security warnings, irreversible action confirmations, multi-step sequences where fragment order risks misread, user asks to clarify or repeats question, and anything that requires remembering verbatim content. Resume caveman after clear part done`;
 /**
+* The organization rung local (TUI/studio) knowledge is captured under. A fixed
+* literal on purpose: deriving it from a hostname or path would fragment local
+* knowledge per checkout into scopes nothing ever reads.
+*/
+const LOCAL_KNOWLEDGE_ORG_ID = "local";
+const REPORTED_ORG_UNRESOLVED_LIMIT = 500;
+const reportedOrgUnresolved = /* @__PURE__ */ new Set();
+function reportOrgUnresolved(controller, factoryProjectId) {
+	const sessionId = controller?.session?.id;
+	if (sessionId) {
+		if (reportedOrgUnresolved.has(sessionId)) return;
+		if (reportedOrgUnresolved.size >= REPORTED_ORG_UNRESOLVED_LIMIT) reportedOrgUnresolved.delete(reportedOrgUnresolved.values().next().value);
+		reportedOrgUnresolved.add(sessionId);
+	}
+	const session = controller?.session;
+	console.error(`[Subconscious] Knowledge capture disabled: no organization resolved for session ${session?.id ?? "unknown"} (project ${factoryProjectId ?? "none"}). Knowledge is not written rather than written where it cannot be read.`);
+}
+/**
 * Dynamic memory factory function.
 * Reads OM thresholds from controller state via requestContext.
 * Model functions also read from requestContext (no mutable bridge needed).
@@ -68,20 +86,25 @@ function getDynamicMemory(storage, vector) {
 		const subconsciousEnabled = Boolean(vector) && process.env.MASTRACODE_EXPERIMENTAL_SUBCONSCIOUS === "1";
 		const factoryProjectId = state?.factoryProjectId;
 		const isFactory = typeof factoryProjectId === "string" && factoryProjectId.trim().length > 0;
+		let orgUnresolvedRefusal = false;
 		if (subconsciousEnabled) {
 			const factoryOrgId = state?.factoryOrgId;
-			const ownerId = controller?.session.ownerId;
+			const factoryOwned = isFactory || state?.factoryOrgUnresolved === true;
 			if (typeof factoryOrgId === "string" && factoryOrgId.trim()) requestContext.set("organizationId", factoryOrgId);
-			else if (ownerId) requestContext.set("organizationId", ownerId);
+			else if (factoryOwned) {
+				orgUnresolvedRefusal = true;
+				reportOrgUnresolved(controller, factoryProjectId);
+			} else requestContext.set("organizationId", LOCAL_KNOWLEDGE_ORG_ID);
 			if (isFactory) requestContext.set("knowledgeResourceId", factoryProjectId);
 		}
+		const captureEnabled = subconsciousEnabled && !orgUnresolvedRefusal;
 		const omScope = state?.omScope ?? getOmScope(state?.projectPath);
 		const obsThreshold = state?.observationThreshold ?? 3e4;
 		const refThreshold = state?.reflectionThreshold ?? 4e4;
 		const caveman = state?.cavemanObservations ?? false;
 		const observerPreviousObservationTokens = 1e3;
 		const observeAttachments = state?.observeAttachments;
-		const cacheKey = `${obsThreshold}:${refThreshold}:${omScope}:${observerPreviousObservationTokens}:${caveman ? 1 : 0}:${observeAttachments}:${isFactory ? 1 : 0}:${subconsciousEnabled ? 1 : 0}`;
+		const cacheKey = `${obsThreshold}:${refThreshold}:${omScope}:${observerPreviousObservationTokens}:${caveman ? 1 : 0}:${observeAttachments}:${isFactory ? 1 : 0}:${captureEnabled ? 1 : 0}`;
 		if (cachedMemory && cachedMemoryKey === cacheKey) return cachedMemory;
 		const isResourceScope = omScope === "resource";
 		const observerInstruction = caveman ? `${DYNAMIC_AGENTS_MD_INSTRUCTION}\n\n${CAVEMAN_OM_INSTRUCTION}` : DYNAMIC_AGENTS_MD_INSTRUCTION;
@@ -96,7 +119,7 @@ function getDynamicMemory(storage, vector) {
 					enabled: true,
 					temporalMarkers: true,
 					retrieval: vector ? { vector: true } : true,
-					experimental_subconscious: subconsciousEnabled ? new Subconscious({
+					experimental_subconscious: captureEnabled ? new Subconscious({
 						defaultScope: "resource",
 						maxScope: "resource",
 						pins: isFactory ? { capturePinning: true } : true,
@@ -132,6 +155,6 @@ function getDynamicMemory(storage, vector) {
 	};
 }
 //#endregion
-export { getDynamicMemory };
+export { LOCAL_KNOWLEDGE_ORG_ID, getDynamicMemory };
 
 //# sourceMappingURL=memory.js.map

package/dist/agents/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","names":[],"sources":["../../src/agents/memory.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { MastraCompositeStore } from '@mastra/core/storage';\nimport type { MastraVector } from '@mastra/core/vector';\nimport { fastembed } from '@mastra/fastembed';\nimport { Memory, Subconscious } from '@mastra/memory';\nimport { DEFAULT_OM_MODEL_ID, DEFAULT_OBS_THRESHOLD, DEFAULT_REF_THRESHOLD } from '../constants.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { getOmScope } from '../utils/project.js';\nimport { resolveModel } from './model.js';\n\n/**\n * Read controller state from requestContext.\n * Used by both the memory factory and the OM model functions.\n */\nfunction getAgentControllerState(requestContext: RequestContext): MastraCodeState | undefined {\n  const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  return ctx?.getState() as MastraCodeState | undefined;\n}\n\n/**\n * Observer model function — reads the current observer model ID from\n * controller state via requestContext (now propagated by OM's agent.generate).\n */\nfunction getObserverModel({ requestContext }: { requestContext: RequestContext }) {\n  const state = getAgentControllerState(requestContext);\n  return resolveModel(state?.observerModelId ?? DEFAULT_OM_MODEL_ID, {\n    remapForCodexOAuth: true,\n    requestContext,\n  });\n}\n\n/**\n * Reflector model function — reads the current reflector model ID from\n * controller state via requestContext (now propagated by OM's agent.generate).\n */\nfunction getReflectorModel({ requestContext }: { requestContext: RequestContext }) {\n  const state = getAgentControllerState(requestContext);\n  return resolveModel(state?.reflectorModelId ?? DEFAULT_OM_MODEL_ID, {\n    remapForCodexOAuth: true,\n    requestContext,\n  });\n}\n\nconst DYNAMIC_AGENTS_MD_INSTRUCTION =\n  'Messages wrapped in <system-reminder type=\"dynamic-agents-md\" ...>...</system-reminder> are ephemeral project-context instructions injected from files on disk. Do NOT observe or extract information from these messages — they are reloaded automatically when needed and should not be stored in memory.';\n\n// Derived from https://github.com/JuliusBrussee/caveman and adapted for OM use with fixed full-level compression.\nconst CAVEMAN_OM_INSTRUCTION = `Respond terse like smart caveman. All technical substance stay. Only fluff die.\n\nUse full caveman compression style.\n\nDrop: articles (a/an/the), filler (just/really/basically/actually/simply), pleasantries (sure/certainly/of course/happy to), hedging. Fragments OK. Short synonyms (big not extensive, fix not \"implement a solution for\"). Technical terms exact. Code blocks unchanged. Errors quoted exact. Leave out the words \"agent\" and \"assistant\" at the start of each observation line, it is assumed each line is referring to the assistant unless it specifically says it was about the user. Leave out parenthesis and other text characters like * that would not contribute to understanding the observations.\n\nPattern: \\`[thing] [action] [reason]. [next step]\\`\n\nNot: \"Sure! I'd be happy to help you with that. The issue you're experiencing is likely caused by...\"\nYes: \"Bug in auth middleware. Token expiry check use < not <=. Fix:\"\n\nExample 1\n🔴 14:31 user asks why React component rerenders\n🟡 14:32 saw inline object prop create new ref each render, cause rerender\n✅ 14:34 fixed render issue by wrap object in useMemo\n\nExample 2\n🟡 15:10 explained pool reuse DB connections, skip repeat handshake overhead\n\nDon't say \"Agent did x\", say \"did x\". It will be assumed the agent did what was observed. The who should only be specified for the user or other third parties: \"user asked x\"\n\nDrop caveman for: security warnings, irreversible action confirmations, multi-step sequences where fragment order risks misread, user asks to clarify or repeats question, and anything that requires remembering verbatim content. Resume caveman after clear part done`;\n\n/**\n * Dynamic memory factory function.\n * Reads OM thresholds from controller state via requestContext.\n * Model functions also read from requestContext (no mutable bridge needed).\n */\nexport function getDynamicMemory(storage: MastraCompositeStore, vector?: MastraVector) {\n  // Cache is scoped per storage instance (per getDynamicMemory call) so a\n  // Memory bound to one storage is never reused after storage changes.\n  let cachedMemory: Memory | null = null;\n  let cachedMemoryKey: string | null = null;\n\n  return ({ requestContext }: { requestContext: RequestContext }) => {\n    const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n    const state = controller?.getState() as MastraCodeState | undefined;\n    const subconsciousEnabled = Boolean(vector) && process.env.MASTRACODE_EXPERIMENTAL_SUBCONSCIOUS === '1';\n    const factoryProjectId = state?.factoryProjectId;\n    const isFactory = typeof factoryProjectId === 'string' && factoryProjectId.trim().length > 0;\n\n    if (subconsciousEnabled) {\n      // Factory seeds the authoritative org id into session state; prefer it.\n      // The session owner is a USER id — mapping it into organizationId is only\n      // the legacy fallback for clients (TUI/studio) that never set factoryOrgId.\n      const factoryOrgId = state?.factoryOrgId;\n      const ownerId = controller?.session.ownerId;\n      if (typeof factoryOrgId === 'string' && factoryOrgId.trim()) {\n        requestContext.set('organizationId', factoryOrgId);\n      } else if (ownerId) {\n        requestContext.set('organizationId', ownerId);\n      }\n      // Factory runs share one knowledge graph per project: anchor the\n      // subconscious knowledge scope's resource rung on the project id.\n      if (isFactory) {\n        requestContext.set('knowledgeResourceId', factoryProjectId);\n      }\n    }\n\n    const omScope = state?.omScope ?? getOmScope(state?.projectPath);\n\n    const obsThreshold = state?.observationThreshold ?? DEFAULT_OBS_THRESHOLD;\n    const refThreshold = state?.reflectionThreshold ?? DEFAULT_REF_THRESHOLD;\n    const caveman = state?.cavemanObservations ?? false;\n\n    const observerPreviousObservationTokens = 1000;\n    const observeAttachments = state?.observeAttachments;\n    // Factory sessions get a factory-only Subconscious config, so the cache key\n    // carries a factory presence bit to keep the two configs from cross-serving.\n    const cacheKey = `${obsThreshold}:${refThreshold}:${omScope}:${observerPreviousObservationTokens}:${caveman ? 1 : 0}:${observeAttachments}:${isFactory ? 1 : 0}:${subconsciousEnabled ? 1 : 0}`;\n    if (cachedMemory && cachedMemoryKey === cacheKey) {\n      return cachedMemory;\n    }\n\n    // Async buffering is not supported with resource scope — disable it\n    const isResourceScope = omScope === 'resource';\n\n    const observerInstruction = caveman\n      ? `${DYNAMIC_AGENTS_MD_INSTRUCTION}\\n\\n${CAVEMAN_OM_INSTRUCTION}`\n      : DYNAMIC_AGENTS_MD_INSTRUCTION;\n    const reflectionInstruction = caveman ? CAVEMAN_OM_INSTRUCTION : undefined;\n\n    cachedMemory = new Memory({\n      storage,\n      vector: vector || false,\n      embedder: vector ? fastembed.small : undefined,\n      options: {\n        // The factory sidebar shows a session the moment it exists, so it needs a\n        // name on the first turn. The TUI names its threads from OM's `threadTitle`\n        // as they grow and would only pay for an extra call here.\n        ...(isFactory ? { generateTitle: { model: getObserverModel } } : {}),\n        observationalMemory: {\n          enabled: true,\n          temporalMarkers: true,\n          retrieval: vector ? { vector: true } : true,\n          experimental_subconscious: subconsciousEnabled\n            ? new Subconscious({\n                defaultScope: 'resource',\n                maxScope: 'resource',\n                // Capture-time pinning is a factory-only opinion; every other\n                // client keeps plain curator-maintained pins.\n                pins: isFactory ? { capturePinning: true } : true,\n                // Factory sessions run the curator every 3 observation runs;\n                // other clients leave the cadence trigger dormant.\n                ...(isFactory ? { curationCadence: 3 } : {}),\n                // Real curation over a factory worklist needs tool room: the\n                // default 5-step budget exhausts mid-batch and the curator never\n                // reaches its cursor acknowledgment (observed live 2026-08-13).\n                ...(isFactory ? { maxSteps: 25 } : {}),\n              })\n            : undefined,\n          scope: omScope,\n          activateAfterIdle: 'auto',\n          activateOnProviderChange: true,\n          observation: {\n            bufferTokens: isResourceScope ? false : 1 / 5,\n            bufferActivation: isResourceScope ? undefined : 2000,\n            model: getObserverModel,\n            messageTokens: obsThreshold,\n            blockAfter: 2,\n            previousObserverTokens: observerPreviousObservationTokens,\n            threadTitle: true,\n            instruction: observerInstruction,\n            observeAttachments,\n          },\n          reflection: {\n            bufferActivation: isResourceScope ? undefined : 1 / 2,\n            blockAfter: 1.1,\n            model: getReflectorModel,\n            observationTokens: refThreshold,\n            instruction: reflectionInstruction,\n          },\n        },\n      },\n    });\n    cachedMemoryKey = cacheKey;\n\n    return cachedMemory;\n  };\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAS,wBAAwB,gBAA6D;CAE5F,OADY,eAAe,IAAI,YACtB,CAAC,EAAE,SAAS;AACvB;;;;;AAMA,SAAS,iBAAiB,EAAE,kBAAsD;CAEhF,OAAO,aADO,wBAAwB,cACd,CAAC,EAAE,mBAAmB,qBAAqB;EACjE,oBAAoB;EACpB;CACF,CAAC;AACH;;;;;AAMA,SAAS,kBAAkB,EAAE,kBAAsD;CAEjF,OAAO,aADO,wBAAwB,cACd,CAAC,EAAE,oBAAoB,qBAAqB;EAClE,oBAAoB;EACpB;CACF,CAAC;AACH;AAEA,MAAM,gCACJ;AAGF,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4B/B,SAAgB,iBAAiB,SAA+B,QAAuB;CAGrF,IAAI,eAA8B;CAClC,IAAI,kBAAiC;CAErC,QAAQ,EAAE,qBAAyD;EACjE,MAAM,aAAa,eAAe,IAAI,YAAY;EAClD,MAAM,QAAQ,YAAY,SAAS;EACnC,MAAM,sBAAsB,QAAQ,MAAM,KAAK,QAAQ,IAAI,yCAAyC;EACpG,MAAM,mBAAmB,OAAO;EAChC,MAAM,YAAY,OAAO,qBAAqB,YAAY,iBAAiB,KAAK,CAAC,CAAC,SAAS;EAE3F,IAAI,qBAAqB;GAIvB,MAAM,eAAe,OAAO;GAC5B,MAAM,UAAU,YAAY,QAAQ;GACpC,IAAI,OAAO,iBAAiB,YAAY,aAAa,KAAK,GACxD,eAAe,IAAI,kBAAkB,YAAY;QAC5C,IAAI,SACT,eAAe,IAAI,kBAAkB,OAAO;GAI9C,IAAI,WACF,eAAe,IAAI,uBAAuB,gBAAgB;EAE9D;EAEA,MAAM,UAAU,OAAO,WAAW,WAAW,OAAO,WAAW;EAE/D,MAAM,eAAe,OAAO,wBAAA;EAC5B,MAAM,eAAe,OAAO,uBAAA;EAC5B,MAAM,UAAU,OAAO,uBAAuB;EAE9C,MAAM,oCAAoC;EAC1C,MAAM,qBAAqB,OAAO;EAGlC,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,kCAAkC,GAAG,UAAU,IAAI,EAAE,GAAG,mBAAmB,GAAG,YAAY,IAAI,EAAE,GAAG,sBAAsB,IAAI;EAC5L,IAAI,gBAAgB,oBAAoB,UACtC,OAAO;EAIT,MAAM,kBAAkB,YAAY;EAEpC,MAAM,sBAAsB,UACxB,GAAG,8BAA8B,MAAM,2BACvC;EACJ,MAAM,wBAAwB,UAAU,yBAAyB,KAAA;EAEjE,eAAe,IAAI,OAAO;GACxB;GACA,QAAQ,UAAU;GAClB,UAAU,SAAS,UAAU,QAAQ,KAAA;GACrC,SAAS;IAIP,GAAI,YAAY,EAAE,eAAe,EAAE,OAAO,iBAAiB,EAAE,IAAI,CAAC;IAClE,qBAAqB;KACnB,SAAS;KACT,iBAAiB;KACjB,WAAW,SAAS,EAAE,QAAQ,KAAK,IAAI;KACvC,2BAA2B,sBACvB,IAAI,aAAa;MACf,cAAc;MACd,UAAU;MAGV,MAAM,YAAY,EAAE,gBAAgB,KAAK,IAAI;MAG7C,GAAI,YAAY,EAAE,iBAAiB,EAAE,IAAI,CAAC;MAI1C,GAAI,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;KACtC,CAAC,IACD,KAAA;KACJ,OAAO;KACP,mBAAmB;KACnB,0BAA0B;KAC1B,aAAa;MACX,cAAc,kBAAkB,QAAQ,IAAI;MAC5C,kBAAkB,kBAAkB,KAAA,IAAY;MAChD,OAAO;MACP,eAAe;MACf,YAAY;MACZ,wBAAwB;MACxB,aAAa;MACb,aAAa;MACb;KACF;KACA,YAAY;MACV,kBAAkB,kBAAkB,KAAA,IAAY,IAAI;MACpD,YAAY;MACZ,OAAO;MACP,mBAAmB;MACnB,aAAa;KACf;IACF;GACF;EACF,CAAC;EACD,kBAAkB;EAElB,OAAO;CACT;AACF"}
+{"version":3,"file":"memory.js","names":[],"sources":["../../src/agents/memory.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { MastraCompositeStore } from '@mastra/core/storage';\nimport type { MastraVector } from '@mastra/core/vector';\nimport { fastembed } from '@mastra/fastembed';\nimport { Memory, Subconscious } from '@mastra/memory';\nimport { DEFAULT_OM_MODEL_ID, DEFAULT_OBS_THRESHOLD, DEFAULT_REF_THRESHOLD } from '../constants.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { getOmScope } from '../utils/project.js';\nimport { resolveModel } from './model.js';\n\n/**\n * Read controller state from requestContext.\n * Used by both the memory factory and the OM model functions.\n */\nfunction getAgentControllerState(requestContext: RequestContext): MastraCodeState | undefined {\n  const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  return ctx?.getState() as MastraCodeState | undefined;\n}\n\n/**\n * Observer model function — reads the current observer model ID from\n * controller state via requestContext (now propagated by OM's agent.generate).\n */\nfunction getObserverModel({ requestContext }: { requestContext: RequestContext }) {\n  const state = getAgentControllerState(requestContext);\n  return resolveModel(state?.observerModelId ?? DEFAULT_OM_MODEL_ID, {\n    remapForCodexOAuth: true,\n    requestContext,\n  });\n}\n\n/**\n * Reflector model function — reads the current reflector model ID from\n * controller state via requestContext (now propagated by OM's agent.generate).\n */\nfunction getReflectorModel({ requestContext }: { requestContext: RequestContext }) {\n  const state = getAgentControllerState(requestContext);\n  return resolveModel(state?.reflectorModelId ?? DEFAULT_OM_MODEL_ID, {\n    remapForCodexOAuth: true,\n    requestContext,\n  });\n}\n\nconst DYNAMIC_AGENTS_MD_INSTRUCTION =\n  'Messages wrapped in <system-reminder type=\"dynamic-agents-md\" ...>...</system-reminder> are ephemeral project-context instructions injected from files on disk. Do NOT observe or extract information from these messages — they are reloaded automatically when needed and should not be stored in memory.';\n\n// Derived from https://github.com/JuliusBrussee/caveman and adapted for OM use with fixed full-level compression.\nconst CAVEMAN_OM_INSTRUCTION = `Respond terse like smart caveman. All technical substance stay. Only fluff die.\n\nUse full caveman compression style.\n\nDrop: articles (a/an/the), filler (just/really/basically/actually/simply), pleasantries (sure/certainly/of course/happy to), hedging. Fragments OK. Short synonyms (big not extensive, fix not \"implement a solution for\"). Technical terms exact. Code blocks unchanged. Errors quoted exact. Leave out the words \"agent\" and \"assistant\" at the start of each observation line, it is assumed each line is referring to the assistant unless it specifically says it was about the user. Leave out parenthesis and other text characters like * that would not contribute to understanding the observations.\n\nPattern: \\`[thing] [action] [reason]. [next step]\\`\n\nNot: \"Sure! I'd be happy to help you with that. The issue you're experiencing is likely caused by...\"\nYes: \"Bug in auth middleware. Token expiry check use < not <=. Fix:\"\n\nExample 1\n🔴 14:31 user asks why React component rerenders\n🟡 14:32 saw inline object prop create new ref each render, cause rerender\n✅ 14:34 fixed render issue by wrap object in useMemo\n\nExample 2\n🟡 15:10 explained pool reuse DB connections, skip repeat handshake overhead\n\nDon't say \"Agent did x\", say \"did x\". It will be assumed the agent did what was observed. The who should only be specified for the user or other third parties: \"user asked x\"\n\nDrop caveman for: security warnings, irreversible action confirmations, multi-step sequences where fragment order risks misread, user asks to clarify or repeats question, and anything that requires remembering verbatim content. Resume caveman after clear part done`;\n\n/**\n * The organization rung local (TUI/studio) knowledge is captured under. A fixed\n * literal on purpose: deriving it from a hostname or path would fragment local\n * knowledge per checkout into scopes nothing ever reads.\n */\nexport const LOCAL_KNOWLEDGE_ORG_ID = 'local';\n\n// One error per session, not per memory resolution. Keyed on the session id\n// rather than the controller object: the controller is read off the request\n// context on every resolution, so it is a fresh object per request and would\n// dedupe nothing. Bounded so a long-running Factory process cannot grow this\n// without limit — refusing sessions are rare, and losing the oldest ids only\n// costs one extra log line.\nconst REPORTED_ORG_UNRESOLVED_LIMIT = 500;\nconst reportedOrgUnresolved = new Set<string>();\n\nfunction reportOrgUnresolved(\n  controller: AgentControllerRequestContext<MastraCodeState> | undefined,\n  factoryProjectId: string | undefined,\n) {\n  const sessionId = controller?.session?.id;\n  if (sessionId) {\n    if (reportedOrgUnresolved.has(sessionId)) return;\n    if (reportedOrgUnresolved.size >= REPORTED_ORG_UNRESOLVED_LIMIT) {\n      reportedOrgUnresolved.delete(reportedOrgUnresolved.values().next().value as string);\n    }\n    reportedOrgUnresolved.add(sessionId);\n  }\n  const session = controller?.session;\n  console.error(\n    `[Subconscious] Knowledge capture disabled: no organization resolved for session ${session?.id ?? 'unknown'} (project ${factoryProjectId ?? 'none'}). Knowledge is not written rather than written where it cannot be read.`,\n  );\n}\n\n/**\n * Dynamic memory factory function.\n * Reads OM thresholds from controller state via requestContext.\n * Model functions also read from requestContext (no mutable bridge needed).\n */\nexport function getDynamicMemory(storage: MastraCompositeStore, vector?: MastraVector) {\n  // Cache is scoped per storage instance (per getDynamicMemory call) so a\n  // Memory bound to one storage is never reused after storage changes.\n  let cachedMemory: Memory | null = null;\n  let cachedMemoryKey: string | null = null;\n\n  return ({ requestContext }: { requestContext: RequestContext }) => {\n    const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n    const state = controller?.getState() as MastraCodeState | undefined;\n    const subconsciousEnabled = Boolean(vector) && process.env.MASTRACODE_EXPERIMENTAL_SUBCONSCIOUS === '1';\n    const factoryProjectId = state?.factoryProjectId;\n    const isFactory = typeof factoryProjectId === 'string' && factoryProjectId.trim().length > 0;\n\n    // A Factory-owned session that could not resolve its org refuses to capture:\n    // writing under a substituted identity produces knowledge the fail-closed\n    // read path can never see.\n    let orgUnresolvedRefusal = false;\n\n    if (subconsciousEnabled) {\n      // Factory seeds the authoritative org id into session state. There is no\n      // fallback: a session owner is a USER id, never an organization.\n      const factoryOrgId = state?.factoryOrgId;\n      const factoryOwned = isFactory || state?.factoryOrgUnresolved === true;\n      if (typeof factoryOrgId === 'string' && factoryOrgId.trim()) {\n        requestContext.set('organizationId', factoryOrgId);\n      } else if (factoryOwned) {\n        orgUnresolvedRefusal = true;\n        reportOrgUnresolved(controller, factoryProjectId);\n      } else {\n        // TUI/studio: an explicit, named scope rather than a cascaded identity.\n        requestContext.set('organizationId', LOCAL_KNOWLEDGE_ORG_ID);\n      }\n      // Factory runs share one knowledge graph per project: anchor the\n      // subconscious knowledge scope's resource rung on the project id.\n      if (isFactory) {\n        requestContext.set('knowledgeResourceId', factoryProjectId);\n      }\n    }\n\n    const captureEnabled = subconsciousEnabled && !orgUnresolvedRefusal;\n\n    const omScope = state?.omScope ?? getOmScope(state?.projectPath);\n\n    const obsThreshold = state?.observationThreshold ?? DEFAULT_OBS_THRESHOLD;\n    const refThreshold = state?.reflectionThreshold ?? DEFAULT_REF_THRESHOLD;\n    const caveman = state?.cavemanObservations ?? false;\n\n    const observerPreviousObservationTokens = 1000;\n    const observeAttachments = state?.observeAttachments;\n    // Factory sessions get a factory-only Subconscious config, so the cache key\n    // carries a factory presence bit to keep the two configs from cross-serving.\n    const cacheKey = `${obsThreshold}:${refThreshold}:${omScope}:${observerPreviousObservationTokens}:${caveman ? 1 : 0}:${observeAttachments}:${isFactory ? 1 : 0}:${captureEnabled ? 1 : 0}`;\n    if (cachedMemory && cachedMemoryKey === cacheKey) {\n      return cachedMemory;\n    }\n\n    // Async buffering is not supported with resource scope — disable it\n    const isResourceScope = omScope === 'resource';\n\n    const observerInstruction = caveman\n      ? `${DYNAMIC_AGENTS_MD_INSTRUCTION}\\n\\n${CAVEMAN_OM_INSTRUCTION}`\n      : DYNAMIC_AGENTS_MD_INSTRUCTION;\n    const reflectionInstruction = caveman ? CAVEMAN_OM_INSTRUCTION : undefined;\n\n    cachedMemory = new Memory({\n      storage,\n      vector: vector || false,\n      embedder: vector ? fastembed.small : undefined,\n      options: {\n        // The factory sidebar shows a session the moment it exists, so it needs a\n        // name on the first turn. The TUI names its threads from OM's `threadTitle`\n        // as they grow and would only pay for an extra call here.\n        ...(isFactory ? { generateTitle: { model: getObserverModel } } : {}),\n        observationalMemory: {\n          enabled: true,\n          temporalMarkers: true,\n          retrieval: vector ? { vector: true } : true,\n          experimental_subconscious: captureEnabled\n            ? new Subconscious({\n                defaultScope: 'resource',\n                maxScope: 'resource',\n                // Capture-time pinning is a factory-only opinion; every other\n                // client keeps plain curator-maintained pins.\n                pins: isFactory ? { capturePinning: true } : true,\n                // Factory sessions run the curator every 3 observation runs;\n                // other clients leave the cadence trigger dormant.\n                ...(isFactory ? { curationCadence: 3 } : {}),\n                // Real curation over a factory worklist needs tool room: the\n                // default 5-step budget exhausts mid-batch and the curator never\n                // reaches its cursor acknowledgment (observed live 2026-08-13).\n                ...(isFactory ? { maxSteps: 25 } : {}),\n              })\n            : undefined,\n          scope: omScope,\n          activateAfterIdle: 'auto',\n          activateOnProviderChange: true,\n          observation: {\n            bufferTokens: isResourceScope ? false : 1 / 5,\n            bufferActivation: isResourceScope ? undefined : 2000,\n            model: getObserverModel,\n            messageTokens: obsThreshold,\n            blockAfter: 2,\n            previousObserverTokens: observerPreviousObservationTokens,\n            threadTitle: true,\n            instruction: observerInstruction,\n            observeAttachments,\n          },\n          reflection: {\n            bufferActivation: isResourceScope ? undefined : 1 / 2,\n            blockAfter: 1.1,\n            model: getReflectorModel,\n            observationTokens: refThreshold,\n            instruction: reflectionInstruction,\n          },\n        },\n      },\n    });\n    cachedMemoryKey = cacheKey;\n\n    return cachedMemory;\n  };\n}\n"],"mappings":";;;;;;;;;;AAeA,SAAS,wBAAwB,gBAA6D;CAE5F,OADY,eAAe,IAAI,YACtB,CAAC,EAAE,SAAS;AACvB;;;;;AAMA,SAAS,iBAAiB,EAAE,kBAAsD;CAEhF,OAAO,aADO,wBAAwB,cACd,CAAC,EAAE,mBAAmB,qBAAqB;EACjE,oBAAoB;EACpB;CACF,CAAC;AACH;;;;;AAMA,SAAS,kBAAkB,EAAE,kBAAsD;CAEjF,OAAO,aADO,wBAAwB,cACd,CAAC,EAAE,oBAAoB,qBAAqB;EAClE,oBAAoB;EACpB;CACF,CAAC;AACH;AAEA,MAAM,gCACJ;AAGF,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4B/B,MAAa,yBAAyB;AAQtC,MAAM,gCAAgC;AACtC,MAAM,wCAAwB,IAAI,IAAY;AAE9C,SAAS,oBACP,YACA,kBACA;CACA,MAAM,YAAY,YAAY,SAAS;CACvC,IAAI,WAAW;EACb,IAAI,sBAAsB,IAAI,SAAS,GAAG;EAC1C,IAAI,sBAAsB,QAAQ,+BAChC,sBAAsB,OAAO,sBAAsB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;EAEpF,sBAAsB,IAAI,SAAS;CACrC;CACA,MAAM,UAAU,YAAY;CAC5B,QAAQ,MACN,mFAAmF,SAAS,MAAM,UAAU,YAAY,oBAAoB,OAAO,yEACrJ;AACF;;;;;;AAOA,SAAgB,iBAAiB,SAA+B,QAAuB;CAGrF,IAAI,eAA8B;CAClC,IAAI,kBAAiC;CAErC,QAAQ,EAAE,qBAAyD;EACjE,MAAM,aAAa,eAAe,IAAI,YAAY;EAClD,MAAM,QAAQ,YAAY,SAAS;EACnC,MAAM,sBAAsB,QAAQ,MAAM,KAAK,QAAQ,IAAI,yCAAyC;EACpG,MAAM,mBAAmB,OAAO;EAChC,MAAM,YAAY,OAAO,qBAAqB,YAAY,iBAAiB,KAAK,CAAC,CAAC,SAAS;EAK3F,IAAI,uBAAuB;EAE3B,IAAI,qBAAqB;GAGvB,MAAM,eAAe,OAAO;GAC5B,MAAM,eAAe,aAAa,OAAO,yBAAyB;GAClE,IAAI,OAAO,iBAAiB,YAAY,aAAa,KAAK,GACxD,eAAe,IAAI,kBAAkB,YAAY;QAC5C,IAAI,cAAc;IACvB,uBAAuB;IACvB,oBAAoB,YAAY,gBAAgB;GAClD,OAEE,eAAe,IAAI,kBAAkB,sBAAsB;GAI7D,IAAI,WACF,eAAe,IAAI,uBAAuB,gBAAgB;EAE9D;EAEA,MAAM,iBAAiB,uBAAuB,CAAC;EAE/C,MAAM,UAAU,OAAO,WAAW,WAAW,OAAO,WAAW;EAE/D,MAAM,eAAe,OAAO,wBAAA;EAC5B,MAAM,eAAe,OAAO,uBAAA;EAC5B,MAAM,UAAU,OAAO,uBAAuB;EAE9C,MAAM,oCAAoC;EAC1C,MAAM,qBAAqB,OAAO;EAGlC,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,kCAAkC,GAAG,UAAU,IAAI,EAAE,GAAG,mBAAmB,GAAG,YAAY,IAAI,EAAE,GAAG,iBAAiB,IAAI;EACvL,IAAI,gBAAgB,oBAAoB,UACtC,OAAO;EAIT,MAAM,kBAAkB,YAAY;EAEpC,MAAM,sBAAsB,UACxB,GAAG,8BAA8B,MAAM,2BACvC;EACJ,MAAM,wBAAwB,UAAU,yBAAyB,KAAA;EAEjE,eAAe,IAAI,OAAO;GACxB;GACA,QAAQ,UAAU;GAClB,UAAU,SAAS,UAAU,QAAQ,KAAA;GACrC,SAAS;IAIP,GAAI,YAAY,EAAE,eAAe,EAAE,OAAO,iBAAiB,EAAE,IAAI,CAAC;IAClE,qBAAqB;KACnB,SAAS;KACT,iBAAiB;KACjB,WAAW,SAAS,EAAE,QAAQ,KAAK,IAAI;KACvC,2BAA2B,iBACvB,IAAI,aAAa;MACf,cAAc;MACd,UAAU;MAGV,MAAM,YAAY,EAAE,gBAAgB,KAAK,IAAI;MAG7C,GAAI,YAAY,EAAE,iBAAiB,EAAE,IAAI,CAAC;MAI1C,GAAI,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;KACtC,CAAC,IACD,KAAA;KACJ,OAAO;KACP,mBAAmB;KACnB,0BAA0B;KAC1B,aAAa;MACX,cAAc,kBAAkB,QAAQ,IAAI;MAC5C,kBAAkB,kBAAkB,KAAA,IAAY;MAChD,OAAO;MACP,eAAe;MACf,YAAY;MACZ,wBAAwB;MACxB,aAAa;MACb,aAAa;MACb;KACF;KACA,YAAY;MACV,kBAAkB,kBAAkB,KAAA,IAAY,IAAI;MACpD,YAAY;MACZ,OAAO;MACP,mBAAmB;MACnB,aAAa;KACf;IACF;GACF;EACF,CAAC;EACD,kBAAkB;EAElB,OAAO;CACT;AACF"}

package/dist/agents/workspace.js

@@ -8,8 +8,8 @@ import { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from "./tool-av
 import fs, { existsSync } from "fs";
 import os from "os";
 import path, { dirname, join } from "path";
-import { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from "@mastra/core/workspace";
 import { fileURLToPath } from "url";
+import { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from "@mastra/core/workspace";
 //#region src/agents/workspace.ts
 function buildSandboxEnv() {
 	return {

package/dist/auth/index.d.ts

@@ -6,6 +6,7 @@ export * from './provider-auth-error.js';
 export * from './storage.js';
 export { anthropicOAuthProvider } from './providers/anthropic.js';
 export { githubCopilotOAuthProvider } from './providers/github-copilot.js';
+export { kimiCodingOAuthProvider } from './providers/kimi-coding.js';
 export { openaiCodexOAuthProvider } from './providers/openai-codex.js';
 export { xaiOAuthProvider } from './providers/xai.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/index.js

@@ -1,7 +1,8 @@
 import { anthropicOAuthProvider } from "./providers/anthropic.js";
 import { githubCopilotOAuthProvider } from "./providers/github-copilot.js";
+import { kimiCodingOAuthProvider } from "./providers/kimi-coding.js";
 import { openaiCodexOAuthProvider } from "./providers/openai-codex.js";
 import { xaiOAuthProvider } from "./providers/xai.js";
 import { AuthStorage, PROVIDER_DEFAULT_MODELS, getOAuthProvider, getOAuthProviders } from "./storage.js";
 import { PROVIDER_AUTH_REQUIRED_ERROR, ProviderAuthRequiredError } from "./provider-auth-error.js";
-export { AuthStorage, PROVIDER_AUTH_REQUIRED_ERROR, PROVIDER_DEFAULT_MODELS, ProviderAuthRequiredError, anthropicOAuthProvider, getOAuthProvider, getOAuthProviders, githubCopilotOAuthProvider, openaiCodexOAuthProvider, xaiOAuthProvider };
+export { AuthStorage, PROVIDER_AUTH_REQUIRED_ERROR, PROVIDER_DEFAULT_MODELS, ProviderAuthRequiredError, anthropicOAuthProvider, getOAuthProvider, getOAuthProviders, githubCopilotOAuthProvider, kimiCodingOAuthProvider, openaiCodexOAuthProvider, xaiOAuthProvider };

package/dist/auth/providers/kimi-coding.d.ts

@@ -0,0 +1,38 @@
+import type { DeviceCodePollState } from '../device-code.js';
+import type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';
+export declare function createKimiCodingDeviceId(): string;
+export declare function isKimiCodingDeviceId(value: unknown): value is string;
+export declare function getKimiCodingDeviceHeaders(deviceId: string): Record<string, string>;
+export interface KimiCodingDeviceLoginPending {
+    clientId: string;
+    deviceId: string;
+    deviceCode: string;
+    userCode: string;
+    url: string;
+    instructions: string;
+    state: DeviceCodePollState;
+}
+export type KimiCodingDevicePollResult = {
+    status: 'complete';
+    credentials: OAuthCredentials;
+} | {
+    status: 'pending';
+    nextPollMs: number;
+    pending: KimiCodingDeviceLoginPending;
+} | {
+    status: 'failed';
+    error: string;
+};
+export declare function startKimiCodingDeviceLogin(options?: {
+    signal?: AbortSignal;
+}): Promise<KimiCodingDeviceLoginPending>;
+export declare function pollKimiCodingDeviceLogin(pending: KimiCodingDeviceLoginPending, options?: {
+    signal?: AbortSignal;
+}): Promise<KimiCodingDevicePollResult>;
+export declare function loginKimiCoding(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+export declare function refreshKimiCodingToken(refreshToken: string, options: {
+    signal?: AbortSignal;
+    deviceId: string;
+}): Promise<OAuthCredentials>;
+export declare const kimiCodingOAuthProvider: OAuthProviderInterface;
+//# sourceMappingURL=kimi-coding.d.ts.map

package/dist/auth/providers/kimi-coding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi-coding.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/kimi-coding.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAyB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAuBjG,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEpE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKnF;AA6CD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,mBAAmB,CAAC;CAC5B;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,gBAAgB,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,4BAA4B,CAAA;CAAE,GAChF;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACzD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAsDxC;AAgDD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GACjC,OAAO,CAAC,0BAA0B,CAAC,CASrC;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAS/F;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,gBAAgB,CAAC,CAoC3B;AAED,eAAO,MAAM,uBAAuB,EAAE,sBASrC,CAAC"}