@mastra/code-sdk 1.5.2-alpha.1 → 1.5.2-alpha.2

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @mastra/code-sdk
 
+## 1.5.2-alpha.2
+
+### Patch Changes
+
+- Added Kimi For Coding account authentication, API key authentication, token refresh, and model routing. ([#22428](https://github.com/mastra-ai/mastra/pull/22428))
+
+  ```text
+  /connect
+  ```
+
+- Updated dependencies [[`0885364`](https://github.com/mastra-ai/mastra/commit/0885364c2fc7fa31febcfc444fc1ba5231ac1257)]:
+  - @mastra/core@1.63.1-alpha.2
+  - @mastra/memory@1.28.1-alpha.1
+  - @mastra/libsql@1.22.1-alpha.0
+  - @mastra/pg@1.22.1-alpha.0
+
 ## 1.5.2-alpha.1
 
 ### Patch Changes

package/dist/agents/mastracode-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mastracode-gateway.d.ts","sourceRoot":"","sources":["../../src/agents/mastracode-gateway.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAGL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,cAAc,EACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAiBxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAIlE,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAC/C,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAYlD,MAAM,MAAM,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzG,MAAM,MAAM,wBAAwB,GAAG;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,CAAC;AAIF,wBAAgB,iBAAiB,SAEhC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAMD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAoBrE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAUjG;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAQ9F;AAqCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEpH;AAgFD,qBAAa,iBAAkB,SAAQ,kBAAkB;;IACvD,QAAQ,CAAC,EAAE,gBAAyB;IACpC,QAAQ,CAAC,IAAI,wBAAwB;gBAWzB,EACV,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,EAAE,wBAAwB;IAY3B,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD,+EAA+E;IAC/E,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAsBtC,MAAM,CAAC,mBAAmB,CACxB,OAAO,EAAE,kBAAkB,EAC3B,mBAAmB,CAAC,EAAE,MAAM,EAC5B,WAAW,GAAE,eAA6B,GACzC,iBAAiB,GAAG,SAAS;IAchC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,GAAG,0BAA0B;IA+BnG,0BAA0B,IAAI,0BAA0B;IAWlD,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IA+B/D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIrE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMjD,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAevE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CAsMzB"}
+{"version":3,"file":"mastracode-gateway.d.ts","sourceRoot":"","sources":["../../src/agents/mastracode-gateway.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAGL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,cAAc,EACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAkBxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAIlE,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAC/C,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAYlD,MAAM,MAAM,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzG,MAAM,MAAM,wBAAwB,GAAG;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,CAAC;AAIF,wBAAgB,iBAAiB,SAEhC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAMD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAoBrE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAUjG;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,GAAE,eAA6B,GAAG,MAAM,GAAG,SAAS,CAQ9F;AAwCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEpH;AAgFD,qBAAa,iBAAkB,SAAQ,kBAAkB;;IACvD,QAAQ,CAAC,EAAE,gBAAyB;IACpC,QAAQ,CAAC,IAAI,wBAAwB;gBAWzB,EACV,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,EAAE,wBAAwB;IAY3B,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD,+EAA+E;IAC/E,MAAM,CAAC,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAInD;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAsBtC,MAAM,CAAC,mBAAmB,CACxB,OAAO,EAAE,kBAAkB,EAC3B,mBAAmB,CAAC,EAAE,MAAM,EAC5B,WAAW,GAAE,eAA6B,GACzC,iBAAiB,GAAG,SAAS;IAehC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,GAAG,0BAA0B;IA+BnG,0BAA0B,IAAI,0BAA0B;IAWlD,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAuC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIrE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMjD,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAevE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CA8MzB"}

package/dist/agents/mastracode-gateway.js

@@ -4,6 +4,7 @@ import { getCustomProviderId, loadSettings } from "../onboarding/settings.js";
 import { resolveCustomProviders } from "./custom-provider-source.js";
 import { buildAnthropicOAuthFetch, claudeCodeMiddleware, createAnthropicThinkingMiddleware, opencodeClaudeMaxProvider, promptCacheMiddleware } from "../providers/claude-max.js";
 import { getCopilotModelCatalog, githubCopilotProvider } from "../providers/github-copilot.js";
+import { KIMI_CODING_MODELS, kimiCodingProvider } from "../providers/kimi-coding.js";
 import { xaiProvider } from "../providers/xai.js";
 import { createOpenAI } from "@ai-sdk/openai";
 import { wrapLanguageModel } from "ai";
@@ -91,7 +92,10 @@ function getProviderAuthKey(providerId, credentials = authStorage) {
 	const authProviderId = getAuthProviderId(providerId);
 	const storedCred = credentials.get(authProviderId);
 	if (storedCred?.type === "api_key" && storedCred.key.trim().length > 0) return storedCred.key.trim();
-	return credentials.getStoredApiKey(authProviderId)?.trim() || void 0;
+	const dedicatedKey = credentials.getStoredApiKey(authProviderId)?.trim();
+	if (dedicatedKey) return dedicatedKey;
+	if (credentials.allowEnvironmentFallback === false) return void 0;
+	return authProviderId === "kimi-for-coding" ? process.env.KIMI_API_KEY?.trim() || void 0 : void 0;
 }
 function resolveAuth(request, mastraGatewayApiKey) {
 	return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);
@@ -203,7 +207,8 @@ var MastraCodeGateway = class MastraCodeGateway extends MastraModelGateway {
 			apiKey: mastraGatewayApiKey,
 			source: "gateway"
 		};
-		if (credentials.get(getAuthProviderId(request.providerId))?.type === "oauth") return {
+		const authProviderId = getAuthProviderId(request.providerId);
+		if (credentials.get(authProviderId)?.type === "oauth") return {
 			bearerToken: "oauth",
 			source: "gateway"
 		};
@@ -257,6 +262,13 @@ var MastraCodeGateway = class MastraCodeGateway extends MastraModelGateway {
 				models
 			};
 		}
+		providers["kimi-for-coding"] = {
+			name: "Kimi For Coding",
+			apiKeyEnvVar: "KIMI_API_KEY",
+			apiKeyHeader: "Authorization",
+			gateway: this.id,
+			models: [...KIMI_CODING_MODELS]
+		};
 		try {
 			const copilotModels = await getCopilotModelCatalog({ authStorage });
 			providers["github-copilot"] = {
@@ -323,6 +335,11 @@ var MastraCodeGateway = class MastraCodeGateway extends MastraModelGateway {
 			authStorage: this.#credentials
 		});
 		if (this.#routeThroughMastraGateway) return this.#mastraGateway.resolveLanguageModel(args);
+		if (args.providerId === "kimi-for-coding") return kimiCodingProvider(args.modelId, {
+			apiKey: args.apiKey,
+			headers: args.headers,
+			credentialStore: this.#credentials
+		});
 		return new ModelRouterLanguageModel({
 			id: `${args.providerId}/${args.modelId}`,
 			apiKey: args.apiKey,

package/dist/agents/mastracode-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"mastracode-gateway.js","names":["#mastraGateway","#mastraGatewayBaseUrl","#mastraGatewayApiKey","#routeThroughMastraGateway","#thinkingLevel","#customProviders","#settingsPath","#credentials","#getCustomProviders","#resolveAnthropicModel","#resolveOpenAIModel"],"sources":["../../src/agents/mastracode-gateway.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport { createOpenAI } from '@ai-sdk/openai';\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { CustomAvailableModel, CustomModelCatalogProvider } from '@mastra/core/agent-controller';\nimport {\n  GATEWAY_AUTH_HEADER,\n  MastraGateway,\n  MastraModelGateway,\n  ModelRouterLanguageModel,\n  PROVIDER_REGISTRY,\n} from '@mastra/core/llm';\nimport type {\n  GatewayAuthRequest,\n  GatewayAuthResult,\n  GatewayLanguageModel,\n  MastraModelGatewayInterface,\n  ProviderConfig,\n} from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { getCustomProviderId, loadSettings, MASTRA_GATEWAY_PROVIDER } from '../onboarding/settings.js';\nimport {\n  buildAnthropicOAuthFetch,\n  claudeCodeMiddleware,\n  createAnthropicThinkingMiddleware,\n  opencodeClaudeMaxProvider,\n  promptCacheMiddleware,\n} from '../providers/claude-max.js';\nimport { getCopilotModelCatalog, githubCopilotProvider } from '../providers/github-copilot.js';\nimport {\n  buildOpenAICodexOAuthFetch,\n  createCodexMiddleware,\n  getEffectiveThinkingLevel,\n  openaiCodexProvider,\n  THINKING_LEVEL_TO_REASONING_EFFORT,\n} from '../providers/openai-codex.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { xaiProvider } from '../providers/xai.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\n\nexport const OPENAI_PREFIX = 'openai/';\nexport const MASTRA_GATEWAY_PREFIX = 'mastra/';\nexport const MASTRACODE_GATEWAY_ID = 'mastracode';\n\nconst CODEX_OPENAI_MODEL_REMAPS: Record<string, string> = {\n  'gpt-5.3': 'gpt-5.3-codex',\n  'gpt-5.2': 'gpt-5.2-codex',\n  'gpt-5.1': 'gpt-5.1-codex',\n  'gpt-5.1-mini': 'gpt-5.1-codex-mini',\n  'gpt-5': 'gpt-5-codex',\n};\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport type MastraCodeCustomProvider = { name: string; url: string; apiKey?: string; models?: string[] };\n\nexport type MastraCodeGatewayOptions = {\n  mastraGatewayBaseUrl: string;\n  mastraGatewayApiKey?: string;\n  routeThroughMastraGateway: boolean;\n  thinkingLevel?: ThinkingLevel;\n  customProviders?: MastraCodeCustomProvider[];\n  settingsPath?: string;\n  /**\n   * Per-tenant credential source for this gateway instance. Defaults to the\n   * server-global file-backed `AuthStorage`; deployed web passes the calling\n   * tenant's store so model calls use the caller's own credentials.\n   */\n  credentialStore?: CredentialStore;\n};\n\nconst authStorage = new AuthStorage();\n\nexport function reloadAuthStorage() {\n  authStorage.reload();\n}\n\nexport function stripMastraGatewayPrefix(modelId: string): string {\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? modelId.substring(MASTRA_GATEWAY_PREFIX.length) : modelId;\n}\n\nfunction normalizeAnthropicModelId(modelId: string): string {\n  return modelId.replace(/\\.(?=\\d)/g, '-');\n}\n\nexport function remapOpenAIModelForCodexOAuth(modelId: string): string {\n  const normalizedModelId = stripMastraGatewayPrefix(modelId);\n\n  if (!normalizedModelId.startsWith(OPENAI_PREFIX)) {\n    return modelId;\n  }\n\n  const openaiModelId = normalizedModelId.substring(OPENAI_PREFIX.length);\n\n  if (openaiModelId.includes('-codex')) {\n    return modelId;\n  }\n\n  const codexModelId = CODEX_OPENAI_MODEL_REMAPS[openaiModelId];\n  if (!codexModelId) {\n    return modelId;\n  }\n\n  const remappedModelId = `${OPENAI_PREFIX}${codexModelId}`;\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? `${MASTRA_GATEWAY_PREFIX}${remappedModelId}` : remappedModelId;\n}\n\n/**\n * Resolve the Anthropic API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getAnthropicApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('anthropic');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('anthropic')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false\n    ? undefined\n    : process.env.ANTHROPIC_API_KEY?.trim() || undefined;\n}\n\n/**\n * Resolve the OpenAI API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getOpenAIApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('openai-codex');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('openai-codex')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false ? undefined : process.env.OPENAI_API_KEY?.trim() || undefined;\n}\n\nfunction anthropicApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers?: ModelRequestHeaders,\n  thinkingLevel?: ThinkingLevel,\n) {\n  const anthropic = createAnthropic({ apiKey, headers });\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, thinkingLevel);\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [promptCacheMiddleware, ...(thinkingMiddleware ? [thinkingMiddleware] : [])],\n  });\n}\n\nfunction openaiApiKeyProvider(modelId: string, apiKey: string, headers?: ModelRequestHeaders) {\n  const openai = createOpenAI({ apiKey, baseURL: process.env.OPENAI_BASE_URL, headers });\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [],\n  });\n}\n\nfunction getAuthProviderId(providerId: string): string {\n  return providerId === 'openai' ? 'openai-codex' : providerId;\n}\n\nfunction getProviderAuthKey(providerId: string, credentials: CredentialStore = authStorage): string | undefined {\n  const authProviderId = getAuthProviderId(providerId);\n  const storedCred = credentials.get(authProviderId);\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  return credentials.getStoredApiKey(authProviderId)?.trim() || undefined;\n}\n\nexport function resolveAuth(request: GatewayAuthRequest, mastraGatewayApiKey?: string): GatewayAuthResult | undefined {\n  return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);\n}\n\nfunction getGatewayProviderKey(gatewayId: string, providerId: string): string {\n  if (gatewayId === 'models.dev') return providerId;\n  return providerId === gatewayId ? gatewayId : `${gatewayId}/${providerId}`;\n}\n\nfunction parseGatewayRouterId(\n  routerId: string,\n  gateway: MastraModelGatewayInterface,\n): { gatewayId: string; providerId: string; modelId: string } {\n  const [firstPart = '', secondPart = '', ...restParts] = routerId.split('/');\n  const gatewayId = gateway.id;\n\n  if (firstPart === gatewayId && secondPart) {\n    return {\n      gatewayId,\n      providerId: secondPart,\n      modelId: restParts.join('/'),\n    };\n  }\n\n  return {\n    gatewayId,\n    providerId: firstPart,\n    modelId: [secondPart, ...restParts].filter(Boolean).join('/'),\n  };\n}\n\nfunction hasResolvedAuth(auth: GatewayAuthResult | undefined): boolean {\n  if (!auth) return false;\n  if (auth.apiKey || auth.bearerToken) return true;\n  return auth.headers ? Object.keys(auth.headers).length > 0 : false;\n}\n\nasync function resolveGatewayProviderAuth(\n  gateway: MastraModelGatewayInterface,\n  routerId: string,\n): Promise<GatewayAuthResult | undefined> {\n  if (!gateway.resolveAuth) return undefined;\n\n  const parsed = parseGatewayRouterId(routerId, gateway);\n  try {\n    const result = await gateway.resolveAuth({\n      gatewayId: parsed.gatewayId,\n      providerId: parsed.providerId,\n      modelId: parsed.modelId,\n      routerId,\n    });\n    return hasResolvedAuth(result) ? result : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getMastraCodeProviderConfigs(\n  gateway: MastraModelGatewayInterface,\n): Promise<Record<string, ProviderConfig>> {\n  const providers: Record<string, ProviderConfig> = { ...(PROVIDER_REGISTRY as Record<string, ProviderConfig>) };\n\n  try {\n    const gatewayProviders = await gateway.fetchProviders();\n    for (const [providerId, config] of Object.entries(gatewayProviders)) {\n      providers[getGatewayProviderKey(gateway.id, providerId)] = {\n        ...config,\n        gateway: gateway.id,\n      };\n    }\n  } catch (error) {\n    console.warn(`Failed to load providers from gateway ${gateway.id}:`, error);\n  }\n\n  return providers;\n}\n\nfunction getApiKeyEnvVar(providerConfig: Pick<ProviderConfig, 'apiKeyEnvVar'> | undefined): string | undefined {\n  const envVars = providerConfig?.apiKeyEnvVar;\n  return Array.isArray(envVars) ? envVars[0] : envVars;\n}\n\nexport class MastraCodeGateway extends MastraModelGateway {\n  readonly id = MASTRACODE_GATEWAY_ID;\n  readonly name = 'MastraCode Gateway';\n\n  readonly #mastraGateway: MastraGateway;\n  readonly #mastraGatewayBaseUrl: string;\n  readonly #mastraGatewayApiKey?: string;\n  readonly #routeThroughMastraGateway: boolean;\n  readonly #thinkingLevel?: ThinkingLevel;\n  readonly #customProviders?: MastraCodeCustomProvider[];\n  readonly #settingsPath?: string;\n  readonly #credentials: CredentialStore;\n\n  constructor({\n    mastraGatewayBaseUrl,\n    mastraGatewayApiKey,\n    routeThroughMastraGateway,\n    thinkingLevel,\n    customProviders,\n    settingsPath,\n    credentialStore,\n  }: MastraCodeGatewayOptions) {\n    super();\n    this.#mastraGateway = new MastraGateway({ baseUrl: mastraGatewayBaseUrl });\n    this.#mastraGatewayBaseUrl = mastraGatewayBaseUrl;\n    this.#mastraGatewayApiKey = mastraGatewayApiKey;\n    this.#routeThroughMastraGateway = routeThroughMastraGateway;\n    this.#thinkingLevel = thinkingLevel;\n    this.#customProviders = customProviders;\n    this.#settingsPath = settingsPath;\n    this.#credentials = credentialStore ?? authStorage;\n  }\n\n  static getMastraGatewayApiKey(): string | undefined {\n    return authStorage.getStoredApiKey(MASTRA_GATEWAY_PROVIDER) ?? process.env['MASTRA_GATEWAY_API_KEY'];\n  }\n\n  /** @deprecated Renamed to {@link MastraCodeGateway.getMastraGatewayApiKey}. */\n  static getMemoryGatewayApiKey(): string | undefined {\n    return MastraCodeGateway.getMastraGatewayApiKey();\n  }\n\n  /**\n   * Claim an unprefixed model id (e.g. a bare `anthropic/...`) when this gateway\n   * can authenticate it via OAuth or a stored/env credential. This lets the\n   * shared gateway router select MastraCode for auth resolution, so the status\n   * bar and `/api-keys` reflect OAuth logins instead of only checking env vars.\n   */\n  handlesModel(modelId: string): boolean {\n    const parsed = parseGatewayRouterId(modelId, this);\n    if (!parsed.providerId || !parsed.modelId) return false;\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) return true;\n    const customProvider = this.#getCustomProviders().find(\n      provider => parsed.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) return true;\n    return hasResolvedAuth(\n      MastraCodeGateway.resolveProviderAuth(\n        {\n          gatewayId: this.id,\n          providerId: parsed.providerId,\n          modelId: parsed.modelId,\n          routerId: modelId,\n        },\n        undefined,\n        this.#credentials,\n      ),\n    );\n  }\n\n  static resolveProviderAuth(\n    request: GatewayAuthRequest,\n    mastraGatewayApiKey?: string,\n    credentials: CredentialStore = authStorage,\n  ): GatewayAuthResult | undefined {\n    if (request.gatewayId === 'mastra' && mastraGatewayApiKey) {\n      return { apiKey: mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const storedCred = credentials.get(getAuthProviderId(request.providerId));\n    if (storedCred?.type === 'oauth') {\n      return { bearerToken: 'oauth', source: 'gateway' };\n    }\n\n    const apiKey = getProviderAuthKey(request.providerId, credentials);\n    return apiKey ? { apiKey, source: 'gateway' } : undefined;\n  }\n\n  static createModelCatalogProvider(gateway: MastraModelGatewayInterface): CustomModelCatalogProvider {\n    return async () => {\n      const registry = await getMastraCodeProviderConfigs(gateway);\n      const models: CustomAvailableModel[] = [];\n\n      for (const [provider, providerConfig] of Object.entries(registry)) {\n        const apiKeyEnvVar = getApiKeyEnvVar(providerConfig);\n        const hasEnvKey = apiKeyEnvVar ? Boolean(process.env[apiKeyEnvVar]) : false;\n        const modelNames = providerConfig.models;\n        if (!Array.isArray(modelNames)) continue;\n\n        const gatewayAuth = modelNames[0]\n          ? await resolveGatewayProviderAuth(gateway, `${provider}/${modelNames[0]}`)\n          : undefined;\n\n        for (const modelName of modelNames) {\n          const id = `${provider}/${modelName}`;\n          models.push({\n            id,\n            provider,\n            modelName,\n            hasApiKey: hasEnvKey || Boolean(gatewayAuth),\n            apiKeyEnvVar: apiKeyEnvVar || undefined,\n          });\n        }\n      }\n\n      return models;\n    };\n  }\n\n  createModelCatalogProvider(): CustomModelCatalogProvider {\n    return MastraCodeGateway.createModelCatalogProvider(this);\n  }\n\n  #getCustomProviders(): MastraCodeCustomProvider[] {\n    // Explicit constructor list wins; then a registered source (deployed web,\n    // DB-backed — authoritative, so settings.json is never consulted); then\n    // the local file-backed settings.\n    return this.#customProviders ?? resolveCustomProviders() ?? loadSettings(this.#settingsPath).customProviders;\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    for (const provider of this.#getCustomProviders()) {\n      const models = provider.models ?? [];\n      if (!models.length) continue;\n      providers[getCustomProviderId(provider.name)] = {\n        name: provider.name,\n        url: provider.url,\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models,\n      };\n    }\n\n    try {\n      const copilotModels = await getCopilotModelCatalog({ authStorage });\n      providers['github-copilot'] = {\n        name: 'GitHub Copilot',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: copilotModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load GitHub Copilot model catalog:', error);\n    }\n\n    return providers;\n  }\n\n  buildUrl(modelId: string): string | undefined | Promise<string | undefined> {\n    return this.#routeThroughMastraGateway ? this.#mastraGateway.buildUrl(modelId) : modelId;\n  }\n\n  async getApiKey(modelId: string): Promise<string> {\n    const providerId = stripMastraGatewayPrefix(modelId).split('/', 1)[0];\n    if (this.#routeThroughMastraGateway) return this.#mastraGatewayApiKey ?? '';\n    return providerId ? (getProviderAuthKey(providerId, this.#credentials) ?? '') : '';\n  }\n\n  resolveAuth(request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) {\n      return { apiKey: this.#mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const customProvider = this.#getCustomProviders().find(\n      provider => request.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) {\n      return { apiKey: customProvider.apiKey, source: 'gateway' };\n    }\n\n    return MastraCodeGateway.resolveProviderAuth(request, undefined, this.#credentials);\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const customProvider = this.#getCustomProviders().find(\n      provider => args.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider) {\n      const provider = createOpenAICompatible({\n        name: args.providerId,\n        baseURL: customProvider.url,\n        apiKey: args.apiKey,\n        headers: args.headers,\n      });\n      return provider.chatModel(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'github-copilot') {\n      return githubCopilotProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'moonshotai') {\n      // Prefer the gateway-resolved key (stored credentials), then the canonical\n      // registry env var. Keep the legacy typo name as a fallback for anyone who\n      // set it because of the previous error message.\n      const apiKey =\n        args.apiKey?.trim() || process.env.MOONSHOT_API_KEY?.trim() || process.env.MOONSHOT_AI_API_KEY?.trim();\n      if (!apiKey) {\n        throw new Error('Need MOONSHOT_API_KEY');\n      }\n      return createAnthropic({\n        apiKey,\n        baseURL: 'https://api.moonshot.ai/anthropic/v1',\n        name: 'moonshotai.anthropicv1',\n        headers: args.headers,\n      })(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'anthropic') {\n      return this.#resolveAnthropicModel(args);\n    }\n\n    if (args.providerId === 'openai') {\n      const openaiModel = this.#resolveOpenAIModel(args);\n      if (openaiModel) return openaiModel;\n    }\n\n    if (args.providerId === 'xai' && this.#credentials.get('xai')?.type === 'oauth') {\n      return xaiProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (this.#routeThroughMastraGateway) {\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    return new ModelRouterLanguageModel({\n      id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n      apiKey: args.apiKey,\n      headers: args.headers,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveAnthropicModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const bareModelId = normalizeAnthropicModelId(args.modelId);\n    const storedCred = this.#credentials.get('anthropic');\n    const thinkingMiddleware = createAnthropicThinkingMiddleware(bareModelId, this.#thinkingLevel);\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const anthropic = createAnthropic({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildAnthropicOAuthFetch({ authStorage: this.#credentials }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: anthropic(bareModelId),\n          middleware: [\n            claudeCodeMiddleware,\n            promptCacheMiddleware,\n            ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n          ],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      const gatewayModel = this.#mastraGateway.resolveLanguageModel({\n        ...args,\n        modelId: bareModelId,\n      }) as GatewayLanguageModel;\n      if (!thinkingMiddleware) return gatewayModel;\n      return wrapLanguageModel({\n        model: gatewayModel as any,\n        middleware: [thinkingMiddleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      return opencodeClaudeMaxProvider(bareModelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n        thinkingLevel: this.#thinkingLevel,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        storedCred.key.trim(),\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getAnthropicApiKey(this.#credentials);\n    if (apiKey) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    // No stored credentials: use the OAuth-backed provider so the first request can trigger login.\n    return opencodeClaudeMaxProvider(bareModelId, {\n      headers: args.headers,\n      authStorage: this.#credentials,\n      thinkingLevel: this.#thinkingLevel,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveOpenAIModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel | undefined {\n    const storedCred = this.#credentials.get('openai-codex');\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n        const resolvedBareModelId = resolvedModelId.substring(OPENAI_PREFIX.length);\n        const requestedLevel: ThinkingLevel = this.#thinkingLevel ?? 'medium';\n        const effectiveLevel = getEffectiveThinkingLevel(resolvedBareModelId, requestedLevel);\n        const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n        const middleware = createCodexMiddleware(reasoningEffort);\n        const openai = createOpenAI({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildOpenAICodexOAuthFetch({ authStorage: this.#credentials, rewriteUrl: false }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: openai.responses(resolvedBareModelId),\n          middleware: [middleware],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n      return openaiCodexProvider(resolvedModelId.substring(OPENAI_PREFIX.length), {\n        thinkingLevel: this.#thinkingLevel,\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getOpenAIApiKey(this.#credentials);\n    if (apiKey) {\n      return openaiApiKeyProvider(args.modelId, apiKey, args.headers) as unknown as GatewayLanguageModel;\n    }\n\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAyCA,MAAa,gBAAgB;AAC7B,MAAa,wBAAwB;AACrC,MAAa,wBAAwB;AAErC,MAAM,4BAAoD;CACxD,WAAW;CACX,WAAW;CACX,WAAW;CACX,gBAAgB;CAChB,SAAS;AACX;AAqBA,MAAM,cAAc,IAAI,YAAY;AAEpC,SAAgB,oBAAoB;CAClC,YAAY,OAAO;AACrB;AAEA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,QAAQ,WAAA,SAAgC,IAAI,QAAQ,UAAU,CAA4B,IAAI;AACvG;AAEA,SAAS,0BAA0B,SAAyB;CAC1D,OAAO,QAAQ,QAAQ,aAAa,GAAG;AACzC;AAEA,SAAgB,8BAA8B,SAAyB;CACrE,MAAM,oBAAoB,yBAAyB,OAAO;CAE1D,IAAI,CAAC,kBAAkB,WAAA,SAAwB,GAC7C,OAAO;CAGT,MAAM,gBAAgB,kBAAkB,UAAU,CAAoB;CAEtE,IAAI,cAAc,SAAS,QAAQ,GACjC,OAAO;CAGT,MAAM,eAAe,0BAA0B;CAC/C,IAAI,CAAC,cACH,OAAO;CAGT,MAAM,kBAAkB,GAAG,gBAAgB;CAC3C,OAAO,QAAQ,WAAA,SAAgC,IAAI,GAAG,wBAAwB,oBAAoB;AACpG;;;;;AAMA,SAAgB,mBAAmB,cAA+B,aAAiC;CACjG,MAAM,aAAa,YAAY,IAAI,WAAW;CAC9C,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,WAAW,CAAC,EAAE,KAAK;CACpE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAC5C,KAAA,IACA,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAA;AAC/C;;;;;AAMA,SAAgB,gBAAgB,cAA+B,aAAiC;CAC9F,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAAQ,KAAA,IAAY,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC5G;AAEA,SAAS,wBACP,SACA,QACA,SACA,eACA;CACA,MAAM,YAAY,gBAAgB;EAAE;EAAQ;CAAQ,CAAC;CACrD,MAAM,qBAAqB,kCAAkC,SAAS,aAAa;CACnF,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB,YAAY,CAAC,uBAAuB,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC,CAAE;CACzF,CAAC;AACH;AAEA,SAAS,qBAAqB,SAAiB,QAAgB,SAA+B;CAE5F,OAAO,kBAAkB;EACvB,OAFa,aAAa;GAAE;GAAQ,SAAS,QAAQ,IAAI;GAAiB;EAAQ,CAEtE,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC;CACf,CAAC;AACH;AAEA,SAAS,kBAAkB,YAA4B;CACrD,OAAO,eAAe,WAAW,iBAAiB;AACpD;AAEA,SAAS,mBAAmB,YAAoB,cAA+B,aAAiC;CAC9G,MAAM,iBAAiB,kBAAkB,UAAU;CACnD,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,OAAO,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK,KAAK,KAAA;AAChE;AAEA,SAAgB,YAAY,SAA6B,qBAA6D;CACpH,OAAO,kBAAkB,oBAAoB,SAAS,mBAAmB;AAC3E;AAEA,SAAS,sBAAsB,WAAmB,YAA4B;CAC5E,IAAI,cAAc,cAAc,OAAO;CACvC,OAAO,eAAe,YAAY,YAAY,GAAG,UAAU,GAAG;AAChE;AAEA,SAAS,qBACP,UACA,SAC4D;CAC5D,MAAM,CAAC,YAAY,IAAI,aAAa,IAAI,GAAG,aAAa,SAAS,MAAM,GAAG;CAC1E,MAAM,YAAY,QAAQ;CAE1B,IAAI,cAAc,aAAa,YAC7B,OAAO;EACL;EACA,YAAY;EACZ,SAAS,UAAU,KAAK,GAAG;CAC7B;CAGF,OAAO;EACL;EACA,YAAY;EACZ,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG;CAC9D;AACF;AAEA,SAAS,gBAAgB,MAA8C;CACrE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,UAAU,KAAK,aAAa,OAAO;CAC5C,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI;AAC/D;AAEA,eAAe,2BACb,SACA,UACwC;CACxC,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAA;CAEjC,MAAM,SAAS,qBAAqB,UAAU,OAAO;CACrD,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,YAAY;GACvC,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB;EACF,CAAC;EACD,OAAO,gBAAgB,MAAM,IAAI,SAAS,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;AAEA,eAAe,6BACb,SACyC;CACzC,MAAM,YAA4C,EAAE,GAAI,kBAAqD;CAE7G,IAAI;EACF,MAAM,mBAAmB,MAAM,QAAQ,eAAe;EACtD,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QAAQ,gBAAgB,GAChE,UAAU,sBAAsB,QAAQ,IAAI,UAAU,KAAK;GACzD,GAAG;GACH,SAAS,QAAQ;EACnB;CAEJ,SAAS,OAAO;EACd,QAAQ,KAAK,yCAAyC,QAAQ,GAAG,IAAI,KAAK;CAC5E;CAEA,OAAO;AACT;AAEA,SAAS,gBAAgB,gBAAsF;CAC7G,MAAM,UAAU,gBAAgB;CAChC,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAC/C;AAEA,IAAa,oBAAb,MAAa,0BAA0B,mBAAmB;CACxD,KAAc;CACd,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,sBACA,qBACA,2BACA,eACA,iBACA,cACA,mBAC2B;EAC3B,MAAM;EACN,KAAKA,iBAAiB,IAAI,cAAc,EAAE,SAAS,qBAAqB,CAAC;EACzE,KAAKC,wBAAwB;EAC7B,KAAKC,uBAAuB;EAC5B,KAAKC,6BAA6B;EAClC,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKC,gBAAgB;EACrB,KAAKC,eAAe,mBAAmB;CACzC;CAEA,OAAO,yBAA6C;EAClD,OAAO,YAAY,gBAAA,gBAAuC,KAAK,QAAQ,IAAI;CAC7E;;CAGA,OAAO,yBAA6C;EAClD,OAAO,kBAAkB,uBAAuB;CAClD;;;;;;;CAQA,aAAa,SAA0B;EACrC,MAAM,SAAS,qBAAqB,SAAS,IAAI;EACjD,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,SAAS,OAAO;EAClD,IAAI,KAAKJ,8BAA8B,KAAKD,sBAAsB,OAAO;EAIzE,IAHuB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,OAAO,eAAe,oBAAoB,SAAS,IAAI,CAEpD,CAAC,EAAE,QAAQ,OAAO;EACnC,OAAO,gBACL,kBAAkB,oBAChB;GACE,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB,UAAU;EACZ,GACA,KAAA,GACA,KAAKD,YACP,CACF;CACF;CAEA,OAAO,oBACL,SACA,qBACA,cAA+B,aACA;EAC/B,IAAI,QAAQ,cAAc,YAAY,qBACpC,OAAO;GAAE,QAAQ;GAAqB,QAAQ;EAAU;EAI1D,IADmB,YAAY,IAAI,kBAAkB,QAAQ,UAAU,CAC1D,CAAC,EAAE,SAAS,SACvB,OAAO;GAAE,aAAa;GAAS,QAAQ;EAAU;EAGnD,MAAM,SAAS,mBAAmB,QAAQ,YAAY,WAAW;EACjE,OAAO,SAAS;GAAE;GAAQ,QAAQ;EAAU,IAAI,KAAA;CAClD;CAEA,OAAO,2BAA2B,SAAkE;EAClG,OAAO,YAAY;GACjB,MAAM,WAAW,MAAM,6BAA6B,OAAO;GAC3D,MAAM,SAAiC,CAAC;GAExC,KAAK,MAAM,CAAC,UAAU,mBAAmB,OAAO,QAAQ,QAAQ,GAAG;IACjE,MAAM,eAAe,gBAAgB,cAAc;IACnD,MAAM,YAAY,eAAe,QAAQ,QAAQ,IAAI,aAAa,IAAI;IACtE,MAAM,aAAa,eAAe;IAClC,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;IAEhC,MAAM,cAAc,WAAW,KAC3B,MAAM,2BAA2B,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI,IACxE,KAAA;IAEJ,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,KAAK,GAAG,SAAS,GAAG;KAC1B,OAAO,KAAK;MACV;MACA;MACA;MACA,WAAW,aAAa,QAAQ,WAAW;MAC3C,cAAc,gBAAgB,KAAA;KAChC,CAAC;IACH;GACF;GAEA,OAAO;EACT;CACF;CAEA,6BAAyD;EACvD,OAAO,kBAAkB,2BAA2B,IAAI;CAC1D;CAEA,sBAAkD;EAIhD,OAAO,KAAKF,oBAAoB,uBAAuB,KAAK,aAAa,KAAKC,aAAa,CAAC,CAAC;CAC/F;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,KAAK,MAAM,YAAY,KAAKE,oBAAoB,GAAG;GACjD,MAAM,SAAS,SAAS,UAAU,CAAC;GACnC,IAAI,CAAC,OAAO,QAAQ;GACpB,UAAU,oBAAoB,SAAS,IAAI,KAAK;IAC9C,MAAM,SAAS;IACf,KAAK,SAAS;IACd,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd;GACF;EACF;EAEA,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB,EAAE,YAAY,CAAC;GAClE,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EAEA,OAAO;CACT;CAEA,SAAS,SAAmE;EAC1E,OAAO,KAAKL,6BAA6B,KAAKH,eAAe,SAAS,OAAO,IAAI;CACnF;CAEA,MAAM,UAAU,SAAkC;EAChD,MAAM,aAAa,yBAAyB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;EACnE,IAAI,KAAKG,4BAA4B,OAAO,KAAKD,wBAAwB;EACzE,OAAO,aAAc,mBAAmB,YAAY,KAAKK,YAAY,KAAK,KAAM;CAClF;CAEA,YAAY,SAA4D;EACtE,IAAI,KAAKJ,8BAA8B,KAAKD,sBAC1C,OAAO;GAAE,QAAQ,KAAKA;GAAsB,QAAQ;EAAU;EAGhE,MAAM,iBAAiB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,QAAQ,eAAe,oBAAoB,SAAS,IAAI,CACtE;EACA,IAAI,gBAAgB,QAClB,OAAO;GAAE,QAAQ,eAAe;GAAQ,QAAQ;EAAU;EAG5D,OAAO,kBAAkB,oBAAoB,SAAS,KAAA,GAAW,KAAKD,YAAY;CACpF;CAEA,qBAAqB,MAOI;EACvB,MAAM,iBAAiB,KAAKC,oBAAoB,CAAC,CAAC,MAChD,aAAY,KAAK,eAAe,oBAAoB,SAAS,IAAI,CACnE;EACA,IAAI,gBAOF,OANiB,uBAAuB;GACtC,MAAM,KAAK;GACX,SAAS,eAAe;GACxB,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CACc,CAAC,CAAC,UAAU,KAAK,OAAO;EAGxC,IAAI,KAAK,eAAe,kBACtB,OAAO,sBAAsB,KAAK,SAAS;GACzC,SAAS,KAAK;GACd,aAAa,KAAKD;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,cAAc;GAIpC,MAAM,SACJ,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK;GACvG,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uBAAuB;GAEzC,OAAO,gBAAgB;IACrB;IACA,SAAS;IACT,MAAM;IACN,SAAS,KAAK;GAChB,CAAC,CAAC,CAAC,KAAK,OAAO;EACjB;EAEA,IAAI,KAAK,eAAe,aACtB,OAAO,KAAKE,uBAAuB,IAAI;EAGzC,IAAI,KAAK,eAAe,UAAU;GAChC,MAAM,cAAc,KAAKC,oBAAoB,IAAI;GACjD,IAAI,aAAa,OAAO;EAC1B;EAEA,IAAI,KAAK,eAAe,SAAS,KAAKH,aAAa,IAAI,KAAK,CAAC,EAAE,SAAS,SACtE,OAAO,YAAY,KAAK,SAAS;GAC/B,SAAS,KAAK;GACd,aAAa,KAAKA;EACpB,CAAC;EAGH,IAAI,KAAKJ,4BACP,OAAO,KAAKH,eAAe,qBAAqB,IAAI;EAGtD,OAAO,IAAI,yBAAyB;GAClC,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;CACH;CAEA,uBAAuB,MAOE;EACvB,MAAM,cAAc,0BAA0B,KAAK,OAAO;EAC1D,MAAM,aAAa,KAAKO,aAAa,IAAI,WAAW;EACpD,MAAM,qBAAqB,kCAAkC,aAAa,KAAKH,cAAc;EAE7F,IAAI,KAAKD,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAWvB,OAAO,kBAAkB;IACvB,OAXgB,gBAAgB;KAChC,QAAQ;KACR,SAAS,GAAG,KAAKF,sBAAsB;KACvC,SAAS;OACN,sBAAsB,UAAU,KAAK;MACtC,GAAG,KAAK;KACV;KACA,OAAO,yBAAyB,EAAE,aAAa,KAAKM,aAAa,CAAC;IACpE,CAGiB,CAAC,CAAC,WAAW;IAC5B,YAAY;KACV;KACA;KACA,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;IACnD;GACF,CAAC;GAGH,MAAM,eAAe,KAAKP,eAAe,qBAAqB;IAC5D,GAAG;IACH,SAAS;GACX,CAAC;GACD,IAAI,CAAC,oBAAoB,OAAO;GAChC,OAAO,kBAAkB;IACvB,OAAO;IACP,YAAY,CAAC,kBAAkB;GACjC,CAAC;EACH;EAEA,IAAI,YAAY,SAAS,SACvB,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKO;GAClB,eAAe,KAAKH;EACtB,CAAC;EAGH,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,wBACL,aACA,WAAW,IAAI,KAAK,GACpB,KAAK,SACL,KAAKA,cACP;EAGF,MAAM,SAAS,mBAAmB,KAAKG,YAAY;EACnD,IAAI,QACF,OAAO,wBACL,aACA,QACA,KAAK,SACL,KAAKH,cACP;EAIF,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKG;GAClB,eAAe,KAAKH;EACtB,CAAC;CACH;CAEA,oBAAoB,MAOiB;EACnC,MAAM,aAAa,KAAKG,aAAa,IAAI,cAAc;EAEvD,IAAI,KAAKJ,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAAS;IAEhC,MAAM,sBADkB,8BAA8B,UAAU,KAAK,SAC3B,CAAC,CAAC,UAAU,CAAoB;IAG1E,MAAM,kBAAkB,mCADD,0BAA0B,qBADX,KAAKC,kBAAkB,QAEW;IACxE,MAAM,aAAa,sBAAsB,eAAe;IAWxD,OAAO,kBAAkB;KACvB,OAXa,aAAa;MAC1B,QAAQ;MACR,SAAS,GAAG,KAAKH,sBAAsB;MACvC,SAAS;QACN,sBAAsB,UAAU,KAAK;OACtC,GAAG,KAAK;MACV;MACA,OAAO,2BAA2B;OAAE,aAAa,KAAKM;OAAc,YAAY;MAAM,CAAC;KACzF,CAGc,CAAC,CAAC,UAAU,mBAAmB;KAC3C,YAAY,CAAC,UAAU;IACzB,CAAC;GACH;GAEA,OAAO,KAAKP,eAAe,qBAAqB,IAAI;EACtD;EAEA,IAAI,YAAY,SAAS,SAEvB,OAAO,oBADiB,8BAA8B,UAAU,KAAK,SAC5B,CAAC,CAAC,UAAU,CAAoB,GAAG;GAC1E,eAAe,KAAKI;GACpB,SAAS,KAAK;GACd,aAAa,KAAKG;EACpB,CAAC;EAGH,MAAM,SAAS,gBAAgB,KAAKA,YAAY;EAChD,IAAI,QACF,OAAO,qBAAqB,KAAK,SAAS,QAAQ,KAAK,OAAO;CAIlE;AACF"}
+{"version":3,"file":"mastracode-gateway.js","names":["#mastraGateway","#mastraGatewayBaseUrl","#mastraGatewayApiKey","#routeThroughMastraGateway","#thinkingLevel","#customProviders","#settingsPath","#credentials","#getCustomProviders","#resolveAnthropicModel","#resolveOpenAIModel"],"sources":["../../src/agents/mastracode-gateway.ts"],"sourcesContent":["import { createAnthropic } from '@ai-sdk/anthropic';\nimport { createOpenAI } from '@ai-sdk/openai';\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { CustomAvailableModel, CustomModelCatalogProvider } from '@mastra/core/agent-controller';\nimport {\n  GATEWAY_AUTH_HEADER,\n  MastraGateway,\n  MastraModelGateway,\n  ModelRouterLanguageModel,\n  PROVIDER_REGISTRY,\n} from '@mastra/core/llm';\nimport type {\n  GatewayAuthRequest,\n  GatewayAuthResult,\n  GatewayLanguageModel,\n  MastraModelGatewayInterface,\n  ProviderConfig,\n} from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\nimport { getCustomProviderId, loadSettings, MASTRA_GATEWAY_PROVIDER } from '../onboarding/settings.js';\nimport {\n  buildAnthropicOAuthFetch,\n  claudeCodeMiddleware,\n  createAnthropicThinkingMiddleware,\n  opencodeClaudeMaxProvider,\n  promptCacheMiddleware,\n} from '../providers/claude-max.js';\nimport { getCopilotModelCatalog, githubCopilotProvider } from '../providers/github-copilot.js';\nimport { KIMI_CODING_MODELS, kimiCodingProvider } from '../providers/kimi-coding.js';\nimport {\n  buildOpenAICodexOAuthFetch,\n  createCodexMiddleware,\n  getEffectiveThinkingLevel,\n  openaiCodexProvider,\n  THINKING_LEVEL_TO_REASONING_EFFORT,\n} from '../providers/openai-codex.js';\nimport type { ThinkingLevel } from '../providers/openai-codex.js';\nimport { xaiProvider } from '../providers/xai.js';\nimport { resolveCustomProviders } from './custom-provider-source.js';\n\nexport const OPENAI_PREFIX = 'openai/';\nexport const MASTRA_GATEWAY_PREFIX = 'mastra/';\nexport const MASTRACODE_GATEWAY_ID = 'mastracode';\n\nconst CODEX_OPENAI_MODEL_REMAPS: Record<string, string> = {\n  'gpt-5.3': 'gpt-5.3-codex',\n  'gpt-5.2': 'gpt-5.2-codex',\n  'gpt-5.1': 'gpt-5.1-codex',\n  'gpt-5.1-mini': 'gpt-5.1-codex-mini',\n  'gpt-5': 'gpt-5-codex',\n};\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport type MastraCodeCustomProvider = { name: string; url: string; apiKey?: string; models?: string[] };\n\nexport type MastraCodeGatewayOptions = {\n  mastraGatewayBaseUrl: string;\n  mastraGatewayApiKey?: string;\n  routeThroughMastraGateway: boolean;\n  thinkingLevel?: ThinkingLevel;\n  customProviders?: MastraCodeCustomProvider[];\n  settingsPath?: string;\n  /**\n   * Per-tenant credential source for this gateway instance. Defaults to the\n   * server-global file-backed `AuthStorage`; deployed web passes the calling\n   * tenant's store so model calls use the caller's own credentials.\n   */\n  credentialStore?: CredentialStore;\n};\n\nconst authStorage = new AuthStorage();\n\nexport function reloadAuthStorage() {\n  authStorage.reload();\n}\n\nexport function stripMastraGatewayPrefix(modelId: string): string {\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? modelId.substring(MASTRA_GATEWAY_PREFIX.length) : modelId;\n}\n\nfunction normalizeAnthropicModelId(modelId: string): string {\n  return modelId.replace(/\\.(?=\\d)/g, '-');\n}\n\nexport function remapOpenAIModelForCodexOAuth(modelId: string): string {\n  const normalizedModelId = stripMastraGatewayPrefix(modelId);\n\n  if (!normalizedModelId.startsWith(OPENAI_PREFIX)) {\n    return modelId;\n  }\n\n  const openaiModelId = normalizedModelId.substring(OPENAI_PREFIX.length);\n\n  if (openaiModelId.includes('-codex')) {\n    return modelId;\n  }\n\n  const codexModelId = CODEX_OPENAI_MODEL_REMAPS[openaiModelId];\n  if (!codexModelId) {\n    return modelId;\n  }\n\n  const remappedModelId = `${OPENAI_PREFIX}${codexModelId}`;\n  return modelId.startsWith(MASTRA_GATEWAY_PREFIX) ? `${MASTRA_GATEWAY_PREFIX}${remappedModelId}` : remappedModelId;\n}\n\n/**\n * Resolve the Anthropic API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getAnthropicApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('anthropic');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('anthropic')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false\n    ? undefined\n    : process.env.ANTHROPIC_API_KEY?.trim() || undefined;\n}\n\n/**\n * Resolve the OpenAI API key.\n * Main slot → dedicated apikey: slot → env var.\n */\nexport function getOpenAIApiKey(credentials: CredentialStore = authStorage): string | undefined {\n  const storedCred = credentials.get('openai-codex');\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey('openai-codex')?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  return credentials.allowEnvironmentFallback === false ? undefined : process.env.OPENAI_API_KEY?.trim() || undefined;\n}\n\nfunction anthropicApiKeyProvider(\n  modelId: string,\n  apiKey: string,\n  headers?: ModelRequestHeaders,\n  thinkingLevel?: ThinkingLevel,\n) {\n  const anthropic = createAnthropic({ apiKey, headers });\n  const thinkingMiddleware = createAnthropicThinkingMiddleware(modelId, thinkingLevel);\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [promptCacheMiddleware, ...(thinkingMiddleware ? [thinkingMiddleware] : [])],\n  });\n}\n\nfunction openaiApiKeyProvider(modelId: string, apiKey: string, headers?: ModelRequestHeaders) {\n  const openai = createOpenAI({ apiKey, baseURL: process.env.OPENAI_BASE_URL, headers });\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [],\n  });\n}\n\nfunction getAuthProviderId(providerId: string): string {\n  return providerId === 'openai' ? 'openai-codex' : providerId;\n}\n\nfunction getProviderAuthKey(providerId: string, credentials: CredentialStore = authStorage): string | undefined {\n  const authProviderId = getAuthProviderId(providerId);\n  const storedCred = credentials.get(authProviderId);\n  if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n    return storedCred.key.trim();\n  }\n  const dedicatedKey = credentials.getStoredApiKey(authProviderId)?.trim();\n  if (dedicatedKey) return dedicatedKey;\n  if (credentials.allowEnvironmentFallback === false) return undefined;\n  return authProviderId === 'kimi-for-coding' ? process.env.KIMI_API_KEY?.trim() || undefined : undefined;\n}\n\nexport function resolveAuth(request: GatewayAuthRequest, mastraGatewayApiKey?: string): GatewayAuthResult | undefined {\n  return MastraCodeGateway.resolveProviderAuth(request, mastraGatewayApiKey);\n}\n\nfunction getGatewayProviderKey(gatewayId: string, providerId: string): string {\n  if (gatewayId === 'models.dev') return providerId;\n  return providerId === gatewayId ? gatewayId : `${gatewayId}/${providerId}`;\n}\n\nfunction parseGatewayRouterId(\n  routerId: string,\n  gateway: MastraModelGatewayInterface,\n): { gatewayId: string; providerId: string; modelId: string } {\n  const [firstPart = '', secondPart = '', ...restParts] = routerId.split('/');\n  const gatewayId = gateway.id;\n\n  if (firstPart === gatewayId && secondPart) {\n    return {\n      gatewayId,\n      providerId: secondPart,\n      modelId: restParts.join('/'),\n    };\n  }\n\n  return {\n    gatewayId,\n    providerId: firstPart,\n    modelId: [secondPart, ...restParts].filter(Boolean).join('/'),\n  };\n}\n\nfunction hasResolvedAuth(auth: GatewayAuthResult | undefined): boolean {\n  if (!auth) return false;\n  if (auth.apiKey || auth.bearerToken) return true;\n  return auth.headers ? Object.keys(auth.headers).length > 0 : false;\n}\n\nasync function resolveGatewayProviderAuth(\n  gateway: MastraModelGatewayInterface,\n  routerId: string,\n): Promise<GatewayAuthResult | undefined> {\n  if (!gateway.resolveAuth) return undefined;\n\n  const parsed = parseGatewayRouterId(routerId, gateway);\n  try {\n    const result = await gateway.resolveAuth({\n      gatewayId: parsed.gatewayId,\n      providerId: parsed.providerId,\n      modelId: parsed.modelId,\n      routerId,\n    });\n    return hasResolvedAuth(result) ? result : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getMastraCodeProviderConfigs(\n  gateway: MastraModelGatewayInterface,\n): Promise<Record<string, ProviderConfig>> {\n  const providers: Record<string, ProviderConfig> = { ...(PROVIDER_REGISTRY as Record<string, ProviderConfig>) };\n\n  try {\n    const gatewayProviders = await gateway.fetchProviders();\n    for (const [providerId, config] of Object.entries(gatewayProviders)) {\n      providers[getGatewayProviderKey(gateway.id, providerId)] = {\n        ...config,\n        gateway: gateway.id,\n      };\n    }\n  } catch (error) {\n    console.warn(`Failed to load providers from gateway ${gateway.id}:`, error);\n  }\n\n  return providers;\n}\n\nfunction getApiKeyEnvVar(providerConfig: Pick<ProviderConfig, 'apiKeyEnvVar'> | undefined): string | undefined {\n  const envVars = providerConfig?.apiKeyEnvVar;\n  return Array.isArray(envVars) ? envVars[0] : envVars;\n}\n\nexport class MastraCodeGateway extends MastraModelGateway {\n  readonly id = MASTRACODE_GATEWAY_ID;\n  readonly name = 'MastraCode Gateway';\n\n  readonly #mastraGateway: MastraGateway;\n  readonly #mastraGatewayBaseUrl: string;\n  readonly #mastraGatewayApiKey?: string;\n  readonly #routeThroughMastraGateway: boolean;\n  readonly #thinkingLevel?: ThinkingLevel;\n  readonly #customProviders?: MastraCodeCustomProvider[];\n  readonly #settingsPath?: string;\n  readonly #credentials: CredentialStore;\n\n  constructor({\n    mastraGatewayBaseUrl,\n    mastraGatewayApiKey,\n    routeThroughMastraGateway,\n    thinkingLevel,\n    customProviders,\n    settingsPath,\n    credentialStore,\n  }: MastraCodeGatewayOptions) {\n    super();\n    this.#mastraGateway = new MastraGateway({ baseUrl: mastraGatewayBaseUrl });\n    this.#mastraGatewayBaseUrl = mastraGatewayBaseUrl;\n    this.#mastraGatewayApiKey = mastraGatewayApiKey;\n    this.#routeThroughMastraGateway = routeThroughMastraGateway;\n    this.#thinkingLevel = thinkingLevel;\n    this.#customProviders = customProviders;\n    this.#settingsPath = settingsPath;\n    this.#credentials = credentialStore ?? authStorage;\n  }\n\n  static getMastraGatewayApiKey(): string | undefined {\n    return authStorage.getStoredApiKey(MASTRA_GATEWAY_PROVIDER) ?? process.env['MASTRA_GATEWAY_API_KEY'];\n  }\n\n  /** @deprecated Renamed to {@link MastraCodeGateway.getMastraGatewayApiKey}. */\n  static getMemoryGatewayApiKey(): string | undefined {\n    return MastraCodeGateway.getMastraGatewayApiKey();\n  }\n\n  /**\n   * Claim an unprefixed model id (e.g. a bare `anthropic/...`) when this gateway\n   * can authenticate it via OAuth or a stored/env credential. This lets the\n   * shared gateway router select MastraCode for auth resolution, so the status\n   * bar and `/api-keys` reflect OAuth logins instead of only checking env vars.\n   */\n  handlesModel(modelId: string): boolean {\n    const parsed = parseGatewayRouterId(modelId, this);\n    if (!parsed.providerId || !parsed.modelId) return false;\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) return true;\n    const customProvider = this.#getCustomProviders().find(\n      provider => parsed.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) return true;\n    return hasResolvedAuth(\n      MastraCodeGateway.resolveProviderAuth(\n        {\n          gatewayId: this.id,\n          providerId: parsed.providerId,\n          modelId: parsed.modelId,\n          routerId: modelId,\n        },\n        undefined,\n        this.#credentials,\n      ),\n    );\n  }\n\n  static resolveProviderAuth(\n    request: GatewayAuthRequest,\n    mastraGatewayApiKey?: string,\n    credentials: CredentialStore = authStorage,\n  ): GatewayAuthResult | undefined {\n    if (request.gatewayId === 'mastra' && mastraGatewayApiKey) {\n      return { apiKey: mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const authProviderId = getAuthProviderId(request.providerId);\n    const storedCred = credentials.get(authProviderId);\n    if (storedCred?.type === 'oauth') {\n      return { bearerToken: 'oauth', source: 'gateway' };\n    }\n\n    const apiKey = getProviderAuthKey(request.providerId, credentials);\n    return apiKey ? { apiKey, source: 'gateway' } : undefined;\n  }\n\n  static createModelCatalogProvider(gateway: MastraModelGatewayInterface): CustomModelCatalogProvider {\n    return async () => {\n      const registry = await getMastraCodeProviderConfigs(gateway);\n      const models: CustomAvailableModel[] = [];\n\n      for (const [provider, providerConfig] of Object.entries(registry)) {\n        const apiKeyEnvVar = getApiKeyEnvVar(providerConfig);\n        const hasEnvKey = apiKeyEnvVar ? Boolean(process.env[apiKeyEnvVar]) : false;\n        const modelNames = providerConfig.models;\n        if (!Array.isArray(modelNames)) continue;\n\n        const gatewayAuth = modelNames[0]\n          ? await resolveGatewayProviderAuth(gateway, `${provider}/${modelNames[0]}`)\n          : undefined;\n\n        for (const modelName of modelNames) {\n          const id = `${provider}/${modelName}`;\n          models.push({\n            id,\n            provider,\n            modelName,\n            hasApiKey: hasEnvKey || Boolean(gatewayAuth),\n            apiKeyEnvVar: apiKeyEnvVar || undefined,\n          });\n        }\n      }\n\n      return models;\n    };\n  }\n\n  createModelCatalogProvider(): CustomModelCatalogProvider {\n    return MastraCodeGateway.createModelCatalogProvider(this);\n  }\n\n  #getCustomProviders(): MastraCodeCustomProvider[] {\n    // Explicit constructor list wins; then a registered source (deployed web,\n    // DB-backed — authoritative, so settings.json is never consulted); then\n    // the local file-backed settings.\n    return this.#customProviders ?? resolveCustomProviders() ?? loadSettings(this.#settingsPath).customProviders;\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    for (const provider of this.#getCustomProviders()) {\n      const models = provider.models ?? [];\n      if (!models.length) continue;\n      providers[getCustomProviderId(provider.name)] = {\n        name: provider.name,\n        url: provider.url,\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models,\n      };\n    }\n\n    providers['kimi-for-coding'] = {\n      name: 'Kimi For Coding',\n      apiKeyEnvVar: 'KIMI_API_KEY',\n      apiKeyHeader: 'Authorization',\n      gateway: this.id,\n      models: [...KIMI_CODING_MODELS],\n    };\n\n    try {\n      const copilotModels = await getCopilotModelCatalog({ authStorage });\n      providers['github-copilot'] = {\n        name: 'GitHub Copilot',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: copilotModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load GitHub Copilot model catalog:', error);\n    }\n\n    return providers;\n  }\n\n  buildUrl(modelId: string): string | undefined | Promise<string | undefined> {\n    return this.#routeThroughMastraGateway ? this.#mastraGateway.buildUrl(modelId) : modelId;\n  }\n\n  async getApiKey(modelId: string): Promise<string> {\n    const providerId = stripMastraGatewayPrefix(modelId).split('/', 1)[0];\n    if (this.#routeThroughMastraGateway) return this.#mastraGatewayApiKey ?? '';\n    return providerId ? (getProviderAuthKey(providerId, this.#credentials) ?? '') : '';\n  }\n\n  resolveAuth(request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    if (this.#routeThroughMastraGateway && this.#mastraGatewayApiKey) {\n      return { apiKey: this.#mastraGatewayApiKey, source: 'gateway' };\n    }\n\n    const customProvider = this.#getCustomProviders().find(\n      provider => request.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider?.apiKey) {\n      return { apiKey: customProvider.apiKey, source: 'gateway' };\n    }\n\n    return MastraCodeGateway.resolveProviderAuth(request, undefined, this.#credentials);\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const customProvider = this.#getCustomProviders().find(\n      provider => args.providerId === getCustomProviderId(provider.name),\n    );\n    if (customProvider) {\n      const provider = createOpenAICompatible({\n        name: args.providerId,\n        baseURL: customProvider.url,\n        apiKey: args.apiKey,\n        headers: args.headers,\n      });\n      return provider.chatModel(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'github-copilot') {\n      return githubCopilotProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'moonshotai') {\n      // Prefer the gateway-resolved key (stored credentials), then the canonical\n      // registry env var. Keep the legacy typo name as a fallback for anyone who\n      // set it because of the previous error message.\n      const apiKey =\n        args.apiKey?.trim() || process.env.MOONSHOT_API_KEY?.trim() || process.env.MOONSHOT_AI_API_KEY?.trim();\n      if (!apiKey) {\n        throw new Error('Need MOONSHOT_API_KEY');\n      }\n      return createAnthropic({\n        apiKey,\n        baseURL: 'https://api.moonshot.ai/anthropic/v1',\n        name: 'moonshotai.anthropicv1',\n        headers: args.headers,\n      })(args.modelId) as unknown as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'anthropic') {\n      return this.#resolveAnthropicModel(args);\n    }\n\n    if (args.providerId === 'openai') {\n      const openaiModel = this.#resolveOpenAIModel(args);\n      if (openaiModel) return openaiModel;\n    }\n\n    if (args.providerId === 'xai' && this.#credentials.get('xai')?.type === 'oauth') {\n      return xaiProvider(args.modelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (this.#routeThroughMastraGateway) {\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (args.providerId === 'kimi-for-coding') {\n      return kimiCodingProvider(args.modelId, {\n        apiKey: args.apiKey,\n        headers: args.headers,\n        credentialStore: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    return new ModelRouterLanguageModel({\n      id: `${args.providerId}/${args.modelId}` as `${string}/${string}`,\n      apiKey: args.apiKey,\n      headers: args.headers,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveAnthropicModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    const bareModelId = normalizeAnthropicModelId(args.modelId);\n    const storedCred = this.#credentials.get('anthropic');\n    const thinkingMiddleware = createAnthropicThinkingMiddleware(bareModelId, this.#thinkingLevel);\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const anthropic = createAnthropic({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildAnthropicOAuthFetch({ authStorage: this.#credentials }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: anthropic(bareModelId),\n          middleware: [\n            claudeCodeMiddleware,\n            promptCacheMiddleware,\n            ...(thinkingMiddleware ? [thinkingMiddleware] : []),\n          ],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      const gatewayModel = this.#mastraGateway.resolveLanguageModel({\n        ...args,\n        modelId: bareModelId,\n      }) as GatewayLanguageModel;\n      if (!thinkingMiddleware) return gatewayModel;\n      return wrapLanguageModel({\n        model: gatewayModel as any,\n        middleware: [thinkingMiddleware],\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      return opencodeClaudeMaxProvider(bareModelId, {\n        headers: args.headers,\n        authStorage: this.#credentials,\n        thinkingLevel: this.#thinkingLevel,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'api_key' && storedCred.key.trim().length > 0) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        storedCred.key.trim(),\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getAnthropicApiKey(this.#credentials);\n    if (apiKey) {\n      return anthropicApiKeyProvider(\n        bareModelId,\n        apiKey,\n        args.headers,\n        this.#thinkingLevel,\n      ) as unknown as GatewayLanguageModel;\n    }\n\n    // No stored credentials: use the OAuth-backed provider so the first request can trigger login.\n    return opencodeClaudeMaxProvider(bareModelId, {\n      headers: args.headers,\n      authStorage: this.#credentials,\n      thinkingLevel: this.#thinkingLevel,\n    }) as unknown as GatewayLanguageModel;\n  }\n\n  #resolveOpenAIModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel | undefined {\n    const storedCred = this.#credentials.get('openai-codex');\n\n    if (this.#routeThroughMastraGateway) {\n      if (storedCred?.type === 'oauth') {\n        const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n        const resolvedBareModelId = resolvedModelId.substring(OPENAI_PREFIX.length);\n        const requestedLevel: ThinkingLevel = this.#thinkingLevel ?? 'medium';\n        const effectiveLevel = getEffectiveThinkingLevel(resolvedBareModelId, requestedLevel);\n        const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n        const middleware = createCodexMiddleware(reasoningEffort);\n        const openai = createOpenAI({\n          apiKey: 'oauth-gateway-placeholder',\n          baseURL: `${this.#mastraGatewayBaseUrl}/v1`,\n          headers: {\n            [GATEWAY_AUTH_HEADER]: `Bearer ${args.apiKey}`,\n            ...args.headers,\n          },\n          fetch: buildOpenAICodexOAuthFetch({ authStorage: this.#credentials, rewriteUrl: false }) as any,\n        });\n\n        return wrapLanguageModel({\n          model: openai.responses(resolvedBareModelId),\n          middleware: [middleware],\n        }) as unknown as GatewayLanguageModel;\n      }\n\n      return this.#mastraGateway.resolveLanguageModel(args) as GatewayLanguageModel;\n    }\n\n    if (storedCred?.type === 'oauth') {\n      const resolvedModelId = remapOpenAIModelForCodexOAuth(`openai/${args.modelId}`);\n      return openaiCodexProvider(resolvedModelId.substring(OPENAI_PREFIX.length), {\n        thinkingLevel: this.#thinkingLevel,\n        headers: args.headers,\n        authStorage: this.#credentials,\n      }) as unknown as GatewayLanguageModel;\n    }\n\n    const apiKey = getOpenAIApiKey(this.#credentials);\n    if (apiKey) {\n      return openaiApiKeyProvider(args.modelId, apiKey, args.headers) as unknown as GatewayLanguageModel;\n    }\n\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA0CA,MAAa,gBAAgB;AAC7B,MAAa,wBAAwB;AACrC,MAAa,wBAAwB;AAErC,MAAM,4BAAoD;CACxD,WAAW;CACX,WAAW;CACX,WAAW;CACX,gBAAgB;CAChB,SAAS;AACX;AAqBA,MAAM,cAAc,IAAI,YAAY;AAEpC,SAAgB,oBAAoB;CAClC,YAAY,OAAO;AACrB;AAEA,SAAgB,yBAAyB,SAAyB;CAChE,OAAO,QAAQ,WAAA,SAAgC,IAAI,QAAQ,UAAU,CAA4B,IAAI;AACvG;AAEA,SAAS,0BAA0B,SAAyB;CAC1D,OAAO,QAAQ,QAAQ,aAAa,GAAG;AACzC;AAEA,SAAgB,8BAA8B,SAAyB;CACrE,MAAM,oBAAoB,yBAAyB,OAAO;CAE1D,IAAI,CAAC,kBAAkB,WAAA,SAAwB,GAC7C,OAAO;CAGT,MAAM,gBAAgB,kBAAkB,UAAU,CAAoB;CAEtE,IAAI,cAAc,SAAS,QAAQ,GACjC,OAAO;CAGT,MAAM,eAAe,0BAA0B;CAC/C,IAAI,CAAC,cACH,OAAO;CAGT,MAAM,kBAAkB,GAAG,gBAAgB;CAC3C,OAAO,QAAQ,WAAA,SAAgC,IAAI,GAAG,wBAAwB,oBAAoB;AACpG;;;;;AAMA,SAAgB,mBAAmB,cAA+B,aAAiC;CACjG,MAAM,aAAa,YAAY,IAAI,WAAW;CAC9C,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,WAAW,CAAC,EAAE,KAAK;CACpE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAC5C,KAAA,IACA,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAA;AAC/C;;;;;AAMA,SAAgB,gBAAgB,cAA+B,aAAiC;CAC9F,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,OAAO,YAAY,6BAA6B,QAAQ,KAAA,IAAY,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAA;AAC5G;AAEA,SAAS,wBACP,SACA,QACA,SACA,eACA;CACA,MAAM,YAAY,gBAAgB;EAAE;EAAQ;CAAQ,CAAC;CACrD,MAAM,qBAAqB,kCAAkC,SAAS,aAAa;CACnF,OAAO,kBAAkB;EACvB,OAAO,UAAU,OAAO;EACxB,YAAY,CAAC,uBAAuB,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC,CAAE;CACzF,CAAC;AACH;AAEA,SAAS,qBAAqB,SAAiB,QAAgB,SAA+B;CAE5F,OAAO,kBAAkB;EACvB,OAFa,aAAa;GAAE;GAAQ,SAAS,QAAQ,IAAI;GAAiB;EAAQ,CAEtE,CAAC,CAAC,UAAU,OAAO;EAC/B,YAAY,CAAC;CACf,CAAC;AACH;AAEA,SAAS,kBAAkB,YAA4B;CACrD,OAAO,eAAe,WAAW,iBAAiB;AACpD;AAEA,SAAS,mBAAmB,YAAoB,cAA+B,aAAiC;CAC9G,MAAM,iBAAiB,kBAAkB,UAAU;CACnD,MAAM,aAAa,YAAY,IAAI,cAAc;CACjD,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,WAAW,IAAI,KAAK;CAE7B,MAAM,eAAe,YAAY,gBAAgB,cAAc,CAAC,EAAE,KAAK;CACvE,IAAI,cAAc,OAAO;CACzB,IAAI,YAAY,6BAA6B,OAAO,OAAO,KAAA;CAC3D,OAAO,mBAAmB,oBAAoB,QAAQ,IAAI,cAAc,KAAK,KAAK,KAAA,IAAY,KAAA;AAChG;AAEA,SAAgB,YAAY,SAA6B,qBAA6D;CACpH,OAAO,kBAAkB,oBAAoB,SAAS,mBAAmB;AAC3E;AAEA,SAAS,sBAAsB,WAAmB,YAA4B;CAC5E,IAAI,cAAc,cAAc,OAAO;CACvC,OAAO,eAAe,YAAY,YAAY,GAAG,UAAU,GAAG;AAChE;AAEA,SAAS,qBACP,UACA,SAC4D;CAC5D,MAAM,CAAC,YAAY,IAAI,aAAa,IAAI,GAAG,aAAa,SAAS,MAAM,GAAG;CAC1E,MAAM,YAAY,QAAQ;CAE1B,IAAI,cAAc,aAAa,YAC7B,OAAO;EACL;EACA,YAAY;EACZ,SAAS,UAAU,KAAK,GAAG;CAC7B;CAGF,OAAO;EACL;EACA,YAAY;EACZ,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG;CAC9D;AACF;AAEA,SAAS,gBAAgB,MAA8C;CACrE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,UAAU,KAAK,aAAa,OAAO;CAC5C,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI;AAC/D;AAEA,eAAe,2BACb,SACA,UACwC;CACxC,IAAI,CAAC,QAAQ,aAAa,OAAO,KAAA;CAEjC,MAAM,SAAS,qBAAqB,UAAU,OAAO;CACrD,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,YAAY;GACvC,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB;EACF,CAAC;EACD,OAAO,gBAAgB,MAAM,IAAI,SAAS,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;AAEA,eAAe,6BACb,SACyC;CACzC,MAAM,YAA4C,EAAE,GAAI,kBAAqD;CAE7G,IAAI;EACF,MAAM,mBAAmB,MAAM,QAAQ,eAAe;EACtD,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QAAQ,gBAAgB,GAChE,UAAU,sBAAsB,QAAQ,IAAI,UAAU,KAAK;GACzD,GAAG;GACH,SAAS,QAAQ;EACnB;CAEJ,SAAS,OAAO;EACd,QAAQ,KAAK,yCAAyC,QAAQ,GAAG,IAAI,KAAK;CAC5E;CAEA,OAAO;AACT;AAEA,SAAS,gBAAgB,gBAAsF;CAC7G,MAAM,UAAU,gBAAgB;CAChC,OAAO,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAC/C;AAEA,IAAa,oBAAb,MAAa,0BAA0B,mBAAmB;CACxD,KAAc;CACd,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,sBACA,qBACA,2BACA,eACA,iBACA,cACA,mBAC2B;EAC3B,MAAM;EACN,KAAKA,iBAAiB,IAAI,cAAc,EAAE,SAAS,qBAAqB,CAAC;EACzE,KAAKC,wBAAwB;EAC7B,KAAKC,uBAAuB;EAC5B,KAAKC,6BAA6B;EAClC,KAAKC,iBAAiB;EACtB,KAAKC,mBAAmB;EACxB,KAAKC,gBAAgB;EACrB,KAAKC,eAAe,mBAAmB;CACzC;CAEA,OAAO,yBAA6C;EAClD,OAAO,YAAY,gBAAA,gBAAuC,KAAK,QAAQ,IAAI;CAC7E;;CAGA,OAAO,yBAA6C;EAClD,OAAO,kBAAkB,uBAAuB;CAClD;;;;;;;CAQA,aAAa,SAA0B;EACrC,MAAM,SAAS,qBAAqB,SAAS,IAAI;EACjD,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,SAAS,OAAO;EAClD,IAAI,KAAKJ,8BAA8B,KAAKD,sBAAsB,OAAO;EAIzE,IAHuB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,OAAO,eAAe,oBAAoB,SAAS,IAAI,CAEpD,CAAC,EAAE,QAAQ,OAAO;EACnC,OAAO,gBACL,kBAAkB,oBAChB;GACE,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB,SAAS,OAAO;GAChB,UAAU;EACZ,GACA,KAAA,GACA,KAAKD,YACP,CACF;CACF;CAEA,OAAO,oBACL,SACA,qBACA,cAA+B,aACA;EAC/B,IAAI,QAAQ,cAAc,YAAY,qBACpC,OAAO;GAAE,QAAQ;GAAqB,QAAQ;EAAU;EAG1D,MAAM,iBAAiB,kBAAkB,QAAQ,UAAU;EAE3D,IADmB,YAAY,IAAI,cACtB,CAAC,EAAE,SAAS,SACvB,OAAO;GAAE,aAAa;GAAS,QAAQ;EAAU;EAGnD,MAAM,SAAS,mBAAmB,QAAQ,YAAY,WAAW;EACjE,OAAO,SAAS;GAAE;GAAQ,QAAQ;EAAU,IAAI,KAAA;CAClD;CAEA,OAAO,2BAA2B,SAAkE;EAClG,OAAO,YAAY;GACjB,MAAM,WAAW,MAAM,6BAA6B,OAAO;GAC3D,MAAM,SAAiC,CAAC;GAExC,KAAK,MAAM,CAAC,UAAU,mBAAmB,OAAO,QAAQ,QAAQ,GAAG;IACjE,MAAM,eAAe,gBAAgB,cAAc;IACnD,MAAM,YAAY,eAAe,QAAQ,QAAQ,IAAI,aAAa,IAAI;IACtE,MAAM,aAAa,eAAe;IAClC,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;IAEhC,MAAM,cAAc,WAAW,KAC3B,MAAM,2BAA2B,SAAS,GAAG,SAAS,GAAG,WAAW,IAAI,IACxE,KAAA;IAEJ,KAAK,MAAM,aAAa,YAAY;KAClC,MAAM,KAAK,GAAG,SAAS,GAAG;KAC1B,OAAO,KAAK;MACV;MACA;MACA;MACA,WAAW,aAAa,QAAQ,WAAW;MAC3C,cAAc,gBAAgB,KAAA;KAChC,CAAC;IACH;GACF;GAEA,OAAO;EACT;CACF;CAEA,6BAAyD;EACvD,OAAO,kBAAkB,2BAA2B,IAAI;CAC1D;CAEA,sBAAkD;EAIhD,OAAO,KAAKF,oBAAoB,uBAAuB,KAAK,aAAa,KAAKC,aAAa,CAAC,CAAC;CAC/F;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,KAAK,MAAM,YAAY,KAAKE,oBAAoB,GAAG;GACjD,MAAM,SAAS,SAAS,UAAU,CAAC;GACnC,IAAI,CAAC,OAAO,QAAQ;GACpB,UAAU,oBAAoB,SAAS,IAAI,KAAK;IAC9C,MAAM,SAAS;IACf,KAAK,SAAS;IACd,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd;GACF;EACF;EAEA,UAAU,qBAAqB;GAC7B,MAAM;GACN,cAAc;GACd,cAAc;GACd,SAAS,KAAK;GACd,QAAQ,CAAC,GAAG,kBAAkB;EAChC;EAEA,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB,EAAE,YAAY,CAAC;GAClE,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EAEA,OAAO;CACT;CAEA,SAAS,SAAmE;EAC1E,OAAO,KAAKL,6BAA6B,KAAKH,eAAe,SAAS,OAAO,IAAI;CACnF;CAEA,MAAM,UAAU,SAAkC;EAChD,MAAM,aAAa,yBAAyB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;EACnE,IAAI,KAAKG,4BAA4B,OAAO,KAAKD,wBAAwB;EACzE,OAAO,aAAc,mBAAmB,YAAY,KAAKK,YAAY,KAAK,KAAM;CAClF;CAEA,YAAY,SAA4D;EACtE,IAAI,KAAKJ,8BAA8B,KAAKD,sBAC1C,OAAO;GAAE,QAAQ,KAAKA;GAAsB,QAAQ;EAAU;EAGhE,MAAM,iBAAiB,KAAKM,oBAAoB,CAAC,CAAC,MAChD,aAAY,QAAQ,eAAe,oBAAoB,SAAS,IAAI,CACtE;EACA,IAAI,gBAAgB,QAClB,OAAO;GAAE,QAAQ,eAAe;GAAQ,QAAQ;EAAU;EAG5D,OAAO,kBAAkB,oBAAoB,SAAS,KAAA,GAAW,KAAKD,YAAY;CACpF;CAEA,qBAAqB,MAOI;EACvB,MAAM,iBAAiB,KAAKC,oBAAoB,CAAC,CAAC,MAChD,aAAY,KAAK,eAAe,oBAAoB,SAAS,IAAI,CACnE;EACA,IAAI,gBAOF,OANiB,uBAAuB;GACtC,MAAM,KAAK;GACX,SAAS,eAAe;GACxB,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CACc,CAAC,CAAC,UAAU,KAAK,OAAO;EAGxC,IAAI,KAAK,eAAe,kBACtB,OAAO,sBAAsB,KAAK,SAAS;GACzC,SAAS,KAAK;GACd,aAAa,KAAKD;EACpB,CAAC;EAGH,IAAI,KAAK,eAAe,cAAc;GAIpC,MAAM,SACJ,KAAK,QAAQ,KAAK,KAAK,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,qBAAqB,KAAK;GACvG,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uBAAuB;GAEzC,OAAO,gBAAgB;IACrB;IACA,SAAS;IACT,MAAM;IACN,SAAS,KAAK;GAChB,CAAC,CAAC,CAAC,KAAK,OAAO;EACjB;EAEA,IAAI,KAAK,eAAe,aACtB,OAAO,KAAKE,uBAAuB,IAAI;EAGzC,IAAI,KAAK,eAAe,UAAU;GAChC,MAAM,cAAc,KAAKC,oBAAoB,IAAI;GACjD,IAAI,aAAa,OAAO;EAC1B;EAEA,IAAI,KAAK,eAAe,SAAS,KAAKH,aAAa,IAAI,KAAK,CAAC,EAAE,SAAS,SACtE,OAAO,YAAY,KAAK,SAAS;GAC/B,SAAS,KAAK;GACd,aAAa,KAAKA;EACpB,CAAC;EAGH,IAAI,KAAKJ,4BACP,OAAO,KAAKH,eAAe,qBAAqB,IAAI;EAGtD,IAAI,KAAK,eAAe,mBACtB,OAAO,mBAAmB,KAAK,SAAS;GACtC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,iBAAiB,KAAKO;EACxB,CAAC;EAGH,OAAO,IAAI,yBAAyB;GAClC,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;GAC/B,QAAQ,KAAK;GACb,SAAS,KAAK;EAChB,CAAC;CACH;CAEA,uBAAuB,MAOE;EACvB,MAAM,cAAc,0BAA0B,KAAK,OAAO;EAC1D,MAAM,aAAa,KAAKA,aAAa,IAAI,WAAW;EACpD,MAAM,qBAAqB,kCAAkC,aAAa,KAAKH,cAAc;EAE7F,IAAI,KAAKD,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAWvB,OAAO,kBAAkB;IACvB,OAXgB,gBAAgB;KAChC,QAAQ;KACR,SAAS,GAAG,KAAKF,sBAAsB;KACvC,SAAS;OACN,sBAAsB,UAAU,KAAK;MACtC,GAAG,KAAK;KACV;KACA,OAAO,yBAAyB,EAAE,aAAa,KAAKM,aAAa,CAAC;IACpE,CAGiB,CAAC,CAAC,WAAW;IAC5B,YAAY;KACV;KACA;KACA,GAAI,qBAAqB,CAAC,kBAAkB,IAAI,CAAC;IACnD;GACF,CAAC;GAGH,MAAM,eAAe,KAAKP,eAAe,qBAAqB;IAC5D,GAAG;IACH,SAAS;GACX,CAAC;GACD,IAAI,CAAC,oBAAoB,OAAO;GAChC,OAAO,kBAAkB;IACvB,OAAO;IACP,YAAY,CAAC,kBAAkB;GACjC,CAAC;EACH;EAEA,IAAI,YAAY,SAAS,SACvB,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKO;GAClB,eAAe,KAAKH;EACtB,CAAC;EAGH,IAAI,YAAY,SAAS,aAAa,WAAW,IAAI,KAAK,CAAC,CAAC,SAAS,GACnE,OAAO,wBACL,aACA,WAAW,IAAI,KAAK,GACpB,KAAK,SACL,KAAKA,cACP;EAGF,MAAM,SAAS,mBAAmB,KAAKG,YAAY;EACnD,IAAI,QACF,OAAO,wBACL,aACA,QACA,KAAK,SACL,KAAKH,cACP;EAIF,OAAO,0BAA0B,aAAa;GAC5C,SAAS,KAAK;GACd,aAAa,KAAKG;GAClB,eAAe,KAAKH;EACtB,CAAC;CACH;CAEA,oBAAoB,MAOiB;EACnC,MAAM,aAAa,KAAKG,aAAa,IAAI,cAAc;EAEvD,IAAI,KAAKJ,4BAA4B;GACnC,IAAI,YAAY,SAAS,SAAS;IAEhC,MAAM,sBADkB,8BAA8B,UAAU,KAAK,SAC3B,CAAC,CAAC,UAAU,CAAoB;IAG1E,MAAM,kBAAkB,mCADD,0BAA0B,qBADX,KAAKC,kBAAkB,QAEW;IACxE,MAAM,aAAa,sBAAsB,eAAe;IAWxD,OAAO,kBAAkB;KACvB,OAXa,aAAa;MAC1B,QAAQ;MACR,SAAS,GAAG,KAAKH,sBAAsB;MACvC,SAAS;QACN,sBAAsB,UAAU,KAAK;OACtC,GAAG,KAAK;MACV;MACA,OAAO,2BAA2B;OAAE,aAAa,KAAKM;OAAc,YAAY;MAAM,CAAC;KACzF,CAGc,CAAC,CAAC,UAAU,mBAAmB;KAC3C,YAAY,CAAC,UAAU;IACzB,CAAC;GACH;GAEA,OAAO,KAAKP,eAAe,qBAAqB,IAAI;EACtD;EAEA,IAAI,YAAY,SAAS,SAEvB,OAAO,oBADiB,8BAA8B,UAAU,KAAK,SAC5B,CAAC,CAAC,UAAU,CAAoB,GAAG;GAC1E,eAAe,KAAKI;GACpB,SAAS,KAAK;GACd,aAAa,KAAKG;EACpB,CAAC;EAGH,MAAM,SAAS,gBAAgB,KAAKA,YAAY;EAChD,IAAI,QACF,OAAO,qBAAqB,KAAK,SAAS,QAAQ,KAAK,OAAO;CAIlE;AACF"}

package/dist/agents/workspace.js

@@ -8,8 +8,8 @@ import { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from "./tool-av
 import fs, { existsSync } from "fs";
 import os from "os";
 import path, { dirname, join } from "path";
-import { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from "@mastra/core/workspace";
 import { fileURLToPath } from "url";
+import { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from "@mastra/core/workspace";
 //#region src/agents/workspace.ts
 function buildSandboxEnv() {
 	return {

package/dist/auth/index.d.ts

@@ -6,6 +6,7 @@ export * from './provider-auth-error.js';
 export * from './storage.js';
 export { anthropicOAuthProvider } from './providers/anthropic.js';
 export { githubCopilotOAuthProvider } from './providers/github-copilot.js';
+export { kimiCodingOAuthProvider } from './providers/kimi-coding.js';
 export { openaiCodexOAuthProvider } from './providers/openai-codex.js';
 export { xaiOAuthProvider } from './providers/xai.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/index.js

@@ -1,7 +1,8 @@
 import { anthropicOAuthProvider } from "./providers/anthropic.js";
 import { githubCopilotOAuthProvider } from "./providers/github-copilot.js";
+import { kimiCodingOAuthProvider } from "./providers/kimi-coding.js";
 import { openaiCodexOAuthProvider } from "./providers/openai-codex.js";
 import { xaiOAuthProvider } from "./providers/xai.js";
 import { AuthStorage, PROVIDER_DEFAULT_MODELS, getOAuthProvider, getOAuthProviders } from "./storage.js";
 import { PROVIDER_AUTH_REQUIRED_ERROR, ProviderAuthRequiredError } from "./provider-auth-error.js";
-export { AuthStorage, PROVIDER_AUTH_REQUIRED_ERROR, PROVIDER_DEFAULT_MODELS, ProviderAuthRequiredError, anthropicOAuthProvider, getOAuthProvider, getOAuthProviders, githubCopilotOAuthProvider, openaiCodexOAuthProvider, xaiOAuthProvider };
+export { AuthStorage, PROVIDER_AUTH_REQUIRED_ERROR, PROVIDER_DEFAULT_MODELS, ProviderAuthRequiredError, anthropicOAuthProvider, getOAuthProvider, getOAuthProviders, githubCopilotOAuthProvider, kimiCodingOAuthProvider, openaiCodexOAuthProvider, xaiOAuthProvider };

package/dist/auth/providers/kimi-coding.d.ts

@@ -0,0 +1,38 @@
+import type { DeviceCodePollState } from '../device-code.js';
+import type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';
+export declare function createKimiCodingDeviceId(): string;
+export declare function isKimiCodingDeviceId(value: unknown): value is string;
+export declare function getKimiCodingDeviceHeaders(deviceId: string): Record<string, string>;
+export interface KimiCodingDeviceLoginPending {
+    clientId: string;
+    deviceId: string;
+    deviceCode: string;
+    userCode: string;
+    url: string;
+    instructions: string;
+    state: DeviceCodePollState;
+}
+export type KimiCodingDevicePollResult = {
+    status: 'complete';
+    credentials: OAuthCredentials;
+} | {
+    status: 'pending';
+    nextPollMs: number;
+    pending: KimiCodingDeviceLoginPending;
+} | {
+    status: 'failed';
+    error: string;
+};
+export declare function startKimiCodingDeviceLogin(options?: {
+    signal?: AbortSignal;
+}): Promise<KimiCodingDeviceLoginPending>;
+export declare function pollKimiCodingDeviceLogin(pending: KimiCodingDeviceLoginPending, options?: {
+    signal?: AbortSignal;
+}): Promise<KimiCodingDevicePollResult>;
+export declare function loginKimiCoding(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+export declare function refreshKimiCodingToken(refreshToken: string, options: {
+    signal?: AbortSignal;
+    deviceId: string;
+}): Promise<OAuthCredentials>;
+export declare const kimiCodingOAuthProvider: OAuthProviderInterface;
+//# sourceMappingURL=kimi-coding.d.ts.map

package/dist/auth/providers/kimi-coding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi-coding.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/kimi-coding.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAyB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAuBjG,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEpE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKnF;AA6CD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,mBAAmB,CAAC;CAC5B;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,gBAAgB,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,4BAA4B,CAAA;CAAE,GAChF;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACzD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAsDxC;AAgDD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GACjC,OAAO,CAAC,0BAA0B,CAAC,CASrC;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAS/F;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,gBAAgB,CAAC,CAoC3B;AAED,eAAO,MAAM,uBAAuB,EAAE,sBASrC,CAAC"}

package/dist/auth/providers/kimi-coding.js

@@ -0,0 +1,232 @@
+import { getCurrentVersion } from "../../utils/update-check.js";
+import { abortableSleep, createDeviceCodePollState, pollDeviceCodeUntilComplete, stepDeviceCodePoll } from "../device-code.js";
+import { randomUUID } from "crypto";
+import { arch, hostname, platform, release } from "os";
+//#region src/auth/providers/kimi-coding.ts
+const CLIENT_ID = "17e5f671-d194-4dfb-9706-5516cb48c098";
+const OAUTH_HOST = "https://auth.kimi.com";
+const DEVICE_ID_PATTERN = /^[0-9a-f]{32}$/;
+const DEFAULT_EXPIRES_IN_SECONDS = 900;
+const DEFAULT_POLL_INTERVAL_SECONDS = 5;
+const REQUEST_TIMEOUT_MS = 3e4;
+const REFRESH_MAX_RETRIES = 3;
+function asciiHeaderValue(value) {
+	return value.replace(/[^\x20-\x7E]/g, "").trim() || "unknown";
+}
+const KIMI_DEVICE_DETAILS = {
+	"X-Msh-Platform": "mastracode",
+	"X-Msh-Version": asciiHeaderValue(getCurrentVersion()),
+	"X-Msh-Device-Name": asciiHeaderValue(hostname()),
+	"X-Msh-Device-Model": asciiHeaderValue(`${platform()} ${arch()}`),
+	"X-Msh-Os-Version": asciiHeaderValue(release())
+};
+function createKimiCodingDeviceId() {
+	return randomUUID().replaceAll("-", "");
+}
+function isKimiCodingDeviceId(value) {
+	return typeof value === "string" && DEVICE_ID_PATTERN.test(value);
+}
+function getKimiCodingDeviceHeaders(deviceId) {
+	if (!isKimiCodingDeviceId(deviceId)) throw new Error("Kimi For Coding credentials have an invalid device ID. Please reconnect the account.");
+	return {
+		...KIMI_DEVICE_DETAILS,
+		"X-Msh-Device-Id": deviceId
+	};
+}
+function requestSignal(signal) {
+	const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);
+	return signal ? AbortSignal.any([timeout, signal]) : timeout;
+}
+function trustedHttpUrl(value) {
+	if (typeof value !== "string" || !value) return null;
+	try {
+		const url = new URL(value);
+		return url.protocol === "https:" ? url.href : null;
+	} catch {
+		return null;
+	}
+}
+async function readJson(response) {
+	try {
+		const value = await response.json();
+		return value && typeof value === "object" ? value : null;
+	} catch {
+		return null;
+	}
+}
+function credentialsFromTokenResponse(value, operation, deviceId) {
+	const data = value ?? {};
+	const access = data.access_token;
+	const refresh = data.refresh_token;
+	const expiresIn = data.expires_in;
+	if (typeof access !== "string" || !access || typeof refresh !== "string" || !refresh || typeof expiresIn !== "number" || !Number.isFinite(expiresIn) || expiresIn <= 0) throw new Error(`Kimi For Coding token ${operation} response missing fields`);
+	return {
+		access,
+		refresh,
+		expires: Date.now() + expiresIn * 1e3,
+		deviceId
+	};
+}
+async function startKimiCodingDeviceLogin(options) {
+	const clientId = CLIENT_ID;
+	const deviceId = createKimiCodingDeviceId();
+	const response = await fetch(`${OAUTH_HOST}/api/oauth/device_authorization`, {
+		method: "POST",
+		headers: {
+			...getKimiCodingDeviceHeaders(deviceId),
+			"Content-Type": "application/x-www-form-urlencoded",
+			Accept: "application/json"
+		},
+		body: new URLSearchParams({ client_id: clientId }).toString(),
+		signal: requestSignal(options?.signal)
+	});
+	if (!response.ok) {
+		const text = await response.text().catch(() => "");
+		throw new Error(`Kimi For Coding device authorization failed: ${response.status}${text ? ` ${text}` : ""}`);
+	}
+	const data = await readJson(response);
+	const deviceCode = data?.device_code;
+	const userCode = data?.user_code;
+	const verificationUri = trustedHttpUrl(data?.verification_uri);
+	const verificationUriComplete = trustedHttpUrl(data?.verification_uri_complete);
+	if (typeof deviceCode !== "string" || !deviceCode || typeof userCode !== "string" || !userCode || !verificationUri || !verificationUriComplete) throw new Error("Invalid Kimi For Coding device authorization response");
+	const interval = data?.interval;
+	const expiresIn = data?.expires_in;
+	return {
+		clientId,
+		deviceId,
+		deviceCode,
+		userCode,
+		url: verificationUriComplete,
+		instructions: `Enter code: ${userCode}`,
+		state: createDeviceCodePollState({
+			intervalSeconds: typeof interval === "number" && Number.isFinite(interval) && interval > 0 ? interval : DEFAULT_POLL_INTERVAL_SECONDS,
+			expiresInSeconds: typeof expiresIn === "number" && Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : DEFAULT_EXPIRES_IN_SECONDS
+		})
+	};
+}
+async function pollKimiCodingTokenOnce(pending, signal) {
+	const response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {
+		method: "POST",
+		headers: {
+			...getKimiCodingDeviceHeaders(pending.deviceId),
+			"Content-Type": "application/x-www-form-urlencoded",
+			Accept: "application/json"
+		},
+		body: new URLSearchParams({
+			client_id: pending.clientId,
+			device_code: pending.deviceCode,
+			grant_type: "urn:ietf:params:oauth:grant-type:device_code"
+		}).toString(),
+		signal: requestSignal(signal)
+	});
+	const data = await readJson(response);
+	if (response.ok && typeof data?.access_token === "string") try {
+		return {
+			status: "complete",
+			result: credentialsFromTokenResponse(data, "poll", pending.deviceId)
+		};
+	} catch (error) {
+		return {
+			status: "failed",
+			error: error instanceof Error ? error.message : String(error)
+		};
+	}
+	const error = data?.error;
+	if (error === "authorization_pending") return { status: "pending" };
+	if (error === "slow_down") return {
+		status: "slow_down",
+		intervalSeconds: typeof data?.interval === "number" && data.interval > 0 ? data.interval : void 0
+	};
+	if (error === "expired_token") return {
+		status: "failed",
+		error: "Kimi For Coding authorization expired. Please restart login."
+	};
+	if (error === "access_denied") return {
+		status: "failed",
+		error: "Kimi For Coding login was denied."
+	};
+	const description = typeof data?.error_description === "string" ? `: ${data.error_description}` : "";
+	return {
+		status: "failed",
+		error: `Kimi For Coding token request failed: ${response.status}${typeof error === "string" ? ` ${error}${description}` : ""}`
+	};
+}
+async function pollKimiCodingDeviceLogin(pending, options) {
+	const step = await stepDeviceCodePoll(pending.state, () => pollKimiCodingTokenOnce(pending, options?.signal));
+	if (step.status === "complete") return {
+		status: "complete",
+		credentials: step.result
+	};
+	if (step.status === "failed") return {
+		status: "failed",
+		error: step.error
+	};
+	return {
+		status: "pending",
+		nextPollMs: step.nextPollMs,
+		pending: {
+			...pending,
+			state: step.state
+		}
+	};
+}
+async function loginKimiCoding(callbacks) {
+	const pending = await startKimiCodingDeviceLogin({ signal: callbacks.signal });
+	callbacks.onAuth({
+		url: pending.url,
+		instructions: pending.instructions
+	});
+	callbacks.onProgress?.("Waiting for Kimi For Coding device authorization...");
+	return pollDeviceCodeUntilComplete({
+		state: pending.state,
+		pollOnce: () => pollKimiCodingTokenOnce(pending, callbacks.signal),
+		signal: callbacks.signal
+	});
+}
+async function refreshKimiCodingToken(refreshToken, options) {
+	const clientId = CLIENT_ID;
+	const deviceHeaders = getKimiCodingDeviceHeaders(options.deviceId);
+	let lastError;
+	for (let attempt = 0; attempt <= REFRESH_MAX_RETRIES; attempt++) {
+		if (attempt > 0) await abortableSleep(1e3 * 2 ** (attempt - 1), options.signal);
+		let response;
+		try {
+			response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {
+				method: "POST",
+				headers: {
+					...deviceHeaders,
+					"Content-Type": "application/x-www-form-urlencoded",
+					Accept: "application/json"
+				},
+				body: new URLSearchParams({
+					client_id: clientId,
+					grant_type: "refresh_token",
+					refresh_token: refreshToken
+				}).toString(),
+				signal: requestSignal(options.signal)
+			});
+		} catch (error) {
+			lastError = error instanceof Error ? error : new Error(String(error));
+			if (attempt === REFRESH_MAX_RETRIES) throw lastError;
+			continue;
+		}
+		const data = await readJson(response);
+		if (response.ok) return credentialsFromTokenResponse(data, "refresh", options.deviceId);
+		const error = typeof data?.error === "string" ? ` ${data.error}` : "";
+		lastError = /* @__PURE__ */ new Error(`Kimi For Coding token refresh failed: ${response.status}${error}`);
+		if (!(response.status === 429 || response.status >= 500) || attempt === REFRESH_MAX_RETRIES) throw lastError;
+	}
+	throw lastError ?? /* @__PURE__ */ new Error("Kimi For Coding token refresh failed");
+}
+const kimiCodingOAuthProvider = {
+	id: "kimi-for-coding",
+	name: "Kimi For Coding",
+	login: loginKimiCoding,
+	refreshToken: (credentials) => refreshKimiCodingToken(credentials.refresh, { deviceId: typeof credentials.deviceId === "string" ? credentials.deviceId : "" }),
+	getApiKey: (credentials) => credentials.access
+};
+//#endregion
+export { createKimiCodingDeviceId, getKimiCodingDeviceHeaders, isKimiCodingDeviceId, kimiCodingOAuthProvider, loginKimiCoding, pollKimiCodingDeviceLogin, refreshKimiCodingToken, startKimiCodingDeviceLogin };
+
+//# sourceMappingURL=kimi-coding.js.map

package/dist/auth/providers/kimi-coding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi-coding.js","names":[],"sources":["../../../src/auth/providers/kimi-coding.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { arch, hostname, platform, release } from 'node:os';\nimport { getCurrentVersion } from '../../utils/update-check.js';\nimport {\n  abortableSleep,\n  createDeviceCodePollState,\n  pollDeviceCodeUntilComplete,\n  stepDeviceCodePoll,\n} from '../device-code.js';\nimport type { DeviceCodePollOutcome, DeviceCodePollState } from '../device-code.js';\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../types.js';\n\nconst CLIENT_ID = '17e5f671-d194-4dfb-9706-5516cb48c098';\nconst OAUTH_HOST = 'https://auth.kimi.com';\nconst DEVICE_ID_PATTERN = /^[0-9a-f]{32}$/;\nconst DEFAULT_EXPIRES_IN_SECONDS = 15 * 60;\nconst DEFAULT_POLL_INTERVAL_SECONDS = 5;\nconst REQUEST_TIMEOUT_MS = 30_000;\nconst REFRESH_MAX_RETRIES = 3;\n\nfunction asciiHeaderValue(value: string): string {\n  const sanitized = value.replace(/[^\\x20-\\x7E]/g, '').trim();\n  return sanitized || 'unknown';\n}\n\nconst KIMI_DEVICE_DETAILS = {\n  'X-Msh-Platform': 'mastracode',\n  'X-Msh-Version': asciiHeaderValue(getCurrentVersion()),\n  'X-Msh-Device-Name': asciiHeaderValue(hostname()),\n  'X-Msh-Device-Model': asciiHeaderValue(`${platform()} ${arch()}`),\n  'X-Msh-Os-Version': asciiHeaderValue(release()),\n};\n\nexport function createKimiCodingDeviceId(): string {\n  return randomUUID().replaceAll('-', '');\n}\n\nexport function isKimiCodingDeviceId(value: unknown): value is string {\n  return typeof value === 'string' && DEVICE_ID_PATTERN.test(value);\n}\n\nexport function getKimiCodingDeviceHeaders(deviceId: string): Record<string, string> {\n  if (!isKimiCodingDeviceId(deviceId)) {\n    throw new Error('Kimi For Coding credentials have an invalid device ID. Please reconnect the account.');\n  }\n  return { ...KIMI_DEVICE_DETAILS, 'X-Msh-Device-Id': deviceId };\n}\n\nfunction requestSignal(signal?: AbortSignal): AbortSignal {\n  const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return signal ? AbortSignal.any([timeout, signal]) : timeout;\n}\n\nfunction trustedHttpUrl(value: unknown): string | null {\n  if (typeof value !== 'string' || !value) return null;\n  try {\n    const url = new URL(value);\n    return url.protocol === 'https:' ? url.href : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function readJson(response: Response): Promise<Record<string, unknown> | null> {\n  try {\n    const value = (await response.json()) as unknown;\n    return value && typeof value === 'object' ? (value as Record<string, unknown>) : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction credentialsFromTokenResponse(value: unknown, operation: string, deviceId: string): OAuthCredentials {\n  const data = (value ?? {}) as Record<string, unknown>;\n  const access = data.access_token;\n  const refresh = data.refresh_token;\n  const expiresIn = data.expires_in;\n  if (\n    typeof access !== 'string' ||\n    !access ||\n    typeof refresh !== 'string' ||\n    !refresh ||\n    typeof expiresIn !== 'number' ||\n    !Number.isFinite(expiresIn) ||\n    expiresIn <= 0\n  ) {\n    throw new Error(`Kimi For Coding token ${operation} response missing fields`);\n  }\n  return { access, refresh, expires: Date.now() + expiresIn * 1000, deviceId };\n}\n\nexport interface KimiCodingDeviceLoginPending {\n  clientId: string;\n  deviceId: string;\n  deviceCode: string;\n  userCode: string;\n  url: string;\n  instructions: string;\n  state: DeviceCodePollState;\n}\n\nexport type KimiCodingDevicePollResult =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending: KimiCodingDeviceLoginPending }\n  | { status: 'failed'; error: string };\n\nexport async function startKimiCodingDeviceLogin(options?: {\n  signal?: AbortSignal;\n}): Promise<KimiCodingDeviceLoginPending> {\n  const clientId = CLIENT_ID;\n  const deviceId = createKimiCodingDeviceId();\n  const response = await fetch(`${OAUTH_HOST}/api/oauth/device_authorization`, {\n    method: 'POST',\n    headers: {\n      ...getKimiCodingDeviceHeaders(deviceId),\n      'Content-Type': 'application/x-www-form-urlencoded',\n      Accept: 'application/json',\n    },\n    body: new URLSearchParams({ client_id: clientId }).toString(),\n    signal: requestSignal(options?.signal),\n  });\n  if (!response.ok) {\n    const text = await response.text().catch(() => '');\n    throw new Error(`Kimi For Coding device authorization failed: ${response.status}${text ? ` ${text}` : ''}`);\n  }\n\n  const data = await readJson(response);\n  const deviceCode = data?.device_code;\n  const userCode = data?.user_code;\n  const verificationUri = trustedHttpUrl(data?.verification_uri);\n  const verificationUriComplete = trustedHttpUrl(data?.verification_uri_complete);\n  if (\n    typeof deviceCode !== 'string' ||\n    !deviceCode ||\n    typeof userCode !== 'string' ||\n    !userCode ||\n    !verificationUri ||\n    !verificationUriComplete\n  ) {\n    throw new Error('Invalid Kimi For Coding device authorization response');\n  }\n\n  const interval = data?.interval;\n  const expiresIn = data?.expires_in;\n  return {\n    clientId,\n    deviceId,\n    deviceCode,\n    userCode,\n    url: verificationUriComplete,\n    instructions: `Enter code: ${userCode}`,\n    state: createDeviceCodePollState({\n      intervalSeconds:\n        typeof interval === 'number' && Number.isFinite(interval) && interval > 0\n          ? interval\n          : DEFAULT_POLL_INTERVAL_SECONDS,\n      expiresInSeconds:\n        typeof expiresIn === 'number' && Number.isFinite(expiresIn) && expiresIn > 0\n          ? expiresIn\n          : DEFAULT_EXPIRES_IN_SECONDS,\n    }),\n  };\n}\n\nasync function pollKimiCodingTokenOnce(\n  pending: KimiCodingDeviceLoginPending,\n  signal?: AbortSignal,\n): Promise<DeviceCodePollOutcome<OAuthCredentials>> {\n  const response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {\n    method: 'POST',\n    headers: {\n      ...getKimiCodingDeviceHeaders(pending.deviceId),\n      'Content-Type': 'application/x-www-form-urlencoded',\n      Accept: 'application/json',\n    },\n    body: new URLSearchParams({\n      client_id: pending.clientId,\n      device_code: pending.deviceCode,\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n    }).toString(),\n    signal: requestSignal(signal),\n  });\n  const data = await readJson(response);\n  if (response.ok && typeof data?.access_token === 'string') {\n    try {\n      return { status: 'complete', result: credentialsFromTokenResponse(data, 'poll', pending.deviceId) };\n    } catch (error) {\n      return { status: 'failed', error: error instanceof Error ? error.message : String(error) };\n    }\n  }\n\n  const error = data?.error;\n  if (error === 'authorization_pending') return { status: 'pending' };\n  if (error === 'slow_down') {\n    return {\n      status: 'slow_down',\n      intervalSeconds: typeof data?.interval === 'number' && data.interval > 0 ? data.interval : undefined,\n    };\n  }\n  if (error === 'expired_token') {\n    return { status: 'failed', error: 'Kimi For Coding authorization expired. Please restart login.' };\n  }\n  if (error === 'access_denied') return { status: 'failed', error: 'Kimi For Coding login was denied.' };\n  const description = typeof data?.error_description === 'string' ? `: ${data.error_description}` : '';\n  return {\n    status: 'failed',\n    error: `Kimi For Coding token request failed: ${response.status}${typeof error === 'string' ? ` ${error}${description}` : ''}`,\n  };\n}\n\nexport async function pollKimiCodingDeviceLogin(\n  pending: KimiCodingDeviceLoginPending,\n  options?: { signal?: AbortSignal },\n): Promise<KimiCodingDevicePollResult> {\n  const step = await stepDeviceCodePoll(pending.state, () => pollKimiCodingTokenOnce(pending, options?.signal));\n  if (step.status === 'complete') return { status: 'complete', credentials: step.result };\n  if (step.status === 'failed') return { status: 'failed', error: step.error };\n  return {\n    status: 'pending',\n    nextPollMs: step.nextPollMs,\n    pending: { ...pending, state: step.state },\n  };\n}\n\nexport async function loginKimiCoding(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const pending = await startKimiCodingDeviceLogin({ signal: callbacks.signal });\n  callbacks.onAuth({ url: pending.url, instructions: pending.instructions });\n  callbacks.onProgress?.('Waiting for Kimi For Coding device authorization...');\n  return pollDeviceCodeUntilComplete({\n    state: pending.state,\n    pollOnce: () => pollKimiCodingTokenOnce(pending, callbacks.signal),\n    signal: callbacks.signal,\n  });\n}\n\nexport async function refreshKimiCodingToken(\n  refreshToken: string,\n  options: { signal?: AbortSignal; deviceId: string },\n): Promise<OAuthCredentials> {\n  const clientId = CLIENT_ID;\n  const deviceHeaders = getKimiCodingDeviceHeaders(options.deviceId);\n  let lastError: Error | undefined;\n  for (let attempt = 0; attempt <= REFRESH_MAX_RETRIES; attempt++) {\n    if (attempt > 0) await abortableSleep(1000 * 2 ** (attempt - 1), options.signal);\n    let response: Response;\n    try {\n      response = await fetch(`${OAUTH_HOST}/api/oauth/token`, {\n        method: 'POST',\n        headers: {\n          ...deviceHeaders,\n          'Content-Type': 'application/x-www-form-urlencoded',\n          Accept: 'application/json',\n        },\n        body: new URLSearchParams({\n          client_id: clientId,\n          grant_type: 'refresh_token',\n          refresh_token: refreshToken,\n        }).toString(),\n        signal: requestSignal(options.signal),\n      });\n    } catch (error) {\n      lastError = error instanceof Error ? error : new Error(String(error));\n      if (attempt === REFRESH_MAX_RETRIES) throw lastError;\n      continue;\n    }\n    const data = await readJson(response);\n    if (response.ok) return credentialsFromTokenResponse(data, 'refresh', options.deviceId);\n\n    const error = typeof data?.error === 'string' ? ` ${data.error}` : '';\n    lastError = new Error(`Kimi For Coding token refresh failed: ${response.status}${error}`);\n    const retryable = response.status === 429 || response.status >= 500;\n    if (!retryable || attempt === REFRESH_MAX_RETRIES) throw lastError;\n  }\n  throw lastError ?? new Error('Kimi For Coding token refresh failed');\n}\n\nexport const kimiCodingOAuthProvider: OAuthProviderInterface = {\n  id: 'kimi-for-coding',\n  name: 'Kimi For Coding',\n  login: loginKimiCoding,\n  refreshToken: credentials =>\n    refreshKimiCodingToken(credentials.refresh, {\n      deviceId: typeof credentials.deviceId === 'string' ? credentials.deviceId : '',\n    }),\n  getApiKey: credentials => credentials.access,\n};\n"],"mappings":";;;;;AAYA,MAAM,YAAY;AAClB,MAAM,aAAa;AACnB,MAAM,oBAAoB;AAC1B,MAAM,6BAA6B;AACnC,MAAM,gCAAgC;AACtC,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,SAAS,iBAAiB,OAAuB;CAE/C,OADkB,MAAM,QAAQ,iBAAiB,EAAE,CAAC,CAAC,KACtC,KAAK;AACtB;AAEA,MAAM,sBAAsB;CAC1B,kBAAkB;CAClB,iBAAiB,iBAAiB,kBAAkB,CAAC;CACrD,qBAAqB,iBAAiB,SAAS,CAAC;CAChD,sBAAsB,iBAAiB,GAAG,SAAS,EAAE,GAAG,KAAK,GAAG;CAChE,oBAAoB,iBAAiB,QAAQ,CAAC;AAChD;AAEA,SAAgB,2BAAmC;CACjD,OAAO,WAAW,CAAC,CAAC,WAAW,KAAK,EAAE;AACxC;AAEA,SAAgB,qBAAqB,OAAiC;CACpE,OAAO,OAAO,UAAU,YAAY,kBAAkB,KAAK,KAAK;AAClE;AAEA,SAAgB,2BAA2B,UAA0C;CACnF,IAAI,CAAC,qBAAqB,QAAQ,GAChC,MAAM,IAAI,MAAM,sFAAsF;CAExG,OAAO;EAAE,GAAG;EAAqB,mBAAmB;CAAS;AAC/D;AAEA,SAAS,cAAc,QAAmC;CACxD,MAAM,UAAU,YAAY,QAAQ,kBAAkB;CACtD,OAAO,SAAS,YAAY,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI;AACvD;AAEA,SAAS,eAAe,OAA+B;CACrD,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO;CAChD,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EACzB,OAAO,IAAI,aAAa,WAAW,IAAI,OAAO;CAChD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,SAAS,UAA6D;CACnF,IAAI;EACF,MAAM,QAAS,MAAM,SAAS,KAAK;EACnC,OAAO,SAAS,OAAO,UAAU,WAAY,QAAoC;CACnF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,6BAA6B,OAAgB,WAAmB,UAAoC;CAC3G,MAAM,OAAQ,SAAS,CAAC;CACxB,MAAM,SAAS,KAAK;CACpB,MAAM,UAAU,KAAK;CACrB,MAAM,YAAY,KAAK;CACvB,IACE,OAAO,WAAW,YAClB,CAAC,UACD,OAAO,YAAY,YACnB,CAAC,WACD,OAAO,cAAc,YACrB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GAEb,MAAM,IAAI,MAAM,yBAAyB,UAAU,yBAAyB;CAE9E,OAAO;EAAE;EAAQ;EAAS,SAAS,KAAK,IAAI,IAAI,YAAY;EAAM;CAAS;AAC7E;AAiBA,eAAsB,2BAA2B,SAEP;CACxC,MAAM,WAAW;CACjB,MAAM,WAAW,yBAAyB;CAC1C,MAAM,WAAW,MAAM,MAAM,GAAG,WAAW,kCAAkC;EAC3E,QAAQ;EACR,SAAS;GACP,GAAG,2BAA2B,QAAQ;GACtC,gBAAgB;GAChB,QAAQ;EACV;EACA,MAAM,IAAI,gBAAgB,EAAE,WAAW,SAAS,CAAC,CAAC,CAAC,SAAS;EAC5D,QAAQ,cAAc,SAAS,MAAM;CACvC,CAAC;CACD,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;EACjD,MAAM,IAAI,MAAM,gDAAgD,SAAS,SAAS,OAAO,IAAI,SAAS,IAAI;CAC5G;CAEA,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,MAAM,aAAa,MAAM;CACzB,MAAM,WAAW,MAAM;CACvB,MAAM,kBAAkB,eAAe,MAAM,gBAAgB;CAC7D,MAAM,0BAA0B,eAAe,MAAM,yBAAyB;CAC9E,IACE,OAAO,eAAe,YACtB,CAAC,cACD,OAAO,aAAa,YACpB,CAAC,YACD,CAAC,mBACD,CAAC,yBAED,MAAM,IAAI,MAAM,uDAAuD;CAGzE,MAAM,WAAW,MAAM;CACvB,MAAM,YAAY,MAAM;CACxB,OAAO;EACL;EACA;EACA;EACA;EACA,KAAK;EACL,cAAc,eAAe;EAC7B,OAAO,0BAA0B;GAC/B,iBACE,OAAO,aAAa,YAAY,OAAO,SAAS,QAAQ,KAAK,WAAW,IACpE,WACA;GACN,kBACE,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,KAAK,YAAY,IACvE,YACA;EACR,CAAC;CACH;AACF;AAEA,eAAe,wBACb,SACA,QACkD;CAClD,MAAM,WAAW,MAAM,MAAM,GAAG,WAAW,mBAAmB;EAC5D,QAAQ;EACR,SAAS;GACP,GAAG,2BAA2B,QAAQ,QAAQ;GAC9C,gBAAgB;GAChB,QAAQ;EACV;EACA,MAAM,IAAI,gBAAgB;GACxB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB,YAAY;EACd,CAAC,CAAC,CAAC,SAAS;EACZ,QAAQ,cAAc,MAAM;CAC9B,CAAC;CACD,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,SAAS,MAAM,OAAO,MAAM,iBAAiB,UAC/C,IAAI;EACF,OAAO;GAAE,QAAQ;GAAY,QAAQ,6BAA6B,MAAM,QAAQ,QAAQ,QAAQ;EAAE;CACpG,SAAS,OAAO;EACd,OAAO;GAAE,QAAQ;GAAU,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAAE;CAC3F;CAGF,MAAM,QAAQ,MAAM;CACpB,IAAI,UAAU,yBAAyB,OAAO,EAAE,QAAQ,UAAU;CAClE,IAAI,UAAU,aACZ,OAAO;EACL,QAAQ;EACR,iBAAiB,OAAO,MAAM,aAAa,YAAY,KAAK,WAAW,IAAI,KAAK,WAAW,KAAA;CAC7F;CAEF,IAAI,UAAU,iBACZ,OAAO;EAAE,QAAQ;EAAU,OAAO;CAA+D;CAEnG,IAAI,UAAU,iBAAiB,OAAO;EAAE,QAAQ;EAAU,OAAO;CAAoC;CACrG,MAAM,cAAc,OAAO,MAAM,sBAAsB,WAAW,KAAK,KAAK,sBAAsB;CAClG,OAAO;EACL,QAAQ;EACR,OAAO,yCAAyC,SAAS,SAAS,OAAO,UAAU,WAAW,IAAI,QAAQ,gBAAgB;CAC5H;AACF;AAEA,eAAsB,0BACpB,SACA,SACqC;CACrC,MAAM,OAAO,MAAM,mBAAmB,QAAQ,aAAa,wBAAwB,SAAS,SAAS,MAAM,CAAC;CAC5G,IAAI,KAAK,WAAW,YAAY,OAAO;EAAE,QAAQ;EAAY,aAAa,KAAK;CAAO;CACtF,IAAI,KAAK,WAAW,UAAU,OAAO;EAAE,QAAQ;EAAU,OAAO,KAAK;CAAM;CAC3E,OAAO;EACL,QAAQ;EACR,YAAY,KAAK;EACjB,SAAS;GAAE,GAAG;GAAS,OAAO,KAAK;EAAM;CAC3C;AACF;AAEA,eAAsB,gBAAgB,WAA2D;CAC/F,MAAM,UAAU,MAAM,2BAA2B,EAAE,QAAQ,UAAU,OAAO,CAAC;CAC7E,UAAU,OAAO;EAAE,KAAK,QAAQ;EAAK,cAAc,QAAQ;CAAa,CAAC;CACzE,UAAU,aAAa,qDAAqD;CAC5E,OAAO,4BAA4B;EACjC,OAAO,QAAQ;EACf,gBAAgB,wBAAwB,SAAS,UAAU,MAAM;EACjE,QAAQ,UAAU;CACpB,CAAC;AACH;AAEA,eAAsB,uBACpB,cACA,SAC2B;CAC3B,MAAM,WAAW;CACjB,MAAM,gBAAgB,2BAA2B,QAAQ,QAAQ;CACjE,IAAI;CACJ,KAAK,IAAI,UAAU,GAAG,WAAW,qBAAqB,WAAW;EAC/D,IAAI,UAAU,GAAG,MAAM,eAAe,MAAO,MAAM,UAAU,IAAI,QAAQ,MAAM;EAC/E,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,MAAM,GAAG,WAAW,mBAAmB;IACtD,QAAQ;IACR,SAAS;KACP,GAAG;KACH,gBAAgB;KAChB,QAAQ;IACV;IACA,MAAM,IAAI,gBAAgB;KACxB,WAAW;KACX,YAAY;KACZ,eAAe;IACjB,CAAC,CAAC,CAAC,SAAS;IACZ,QAAQ,cAAc,QAAQ,MAAM;GACtC,CAAC;EACH,SAAS,OAAO;GACd,YAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GACpE,IAAI,YAAY,qBAAqB,MAAM;GAC3C;EACF;EACA,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,SAAS,IAAI,OAAO,6BAA6B,MAAM,WAAW,QAAQ,QAAQ;EAEtF,MAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,IAAI,KAAK,UAAU;EACnE,4BAAY,IAAI,MAAM,yCAAyC,SAAS,SAAS,OAAO;EAExF,IAAI,EADc,SAAS,WAAW,OAAO,SAAS,UAAU,QAC9C,YAAY,qBAAqB,MAAM;CAC3D;CACA,MAAM,6BAAa,IAAI,MAAM,sCAAsC;AACrE;AAEA,MAAa,0BAAkD;CAC7D,IAAI;CACJ,MAAM;CACN,OAAO;CACP,eAAc,gBACZ,uBAAuB,YAAY,SAAS,EAC1C,UAAU,OAAO,YAAY,aAAa,WAAW,YAAY,WAAW,GAC9E,CAAC;CACH,YAAW,gBAAe,YAAY;AACxC"}

package/dist/auth/storage.d.ts

@@ -22,6 +22,7 @@ export declare function getOAuthProviders(): OAuthProviderInterface[];
 export declare class AuthStorage {
     private authPath;
     private data;
+    private refreshPromises;
     constructor(authPath?: string);
     /**
      * Reload credentials from disk.

package/dist/auth/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/auth/storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EACV,cAAc,EAEd,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAQnE,CAAC;AAUF;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,eAAe,GAAG,sBAAsB,GAAG,SAAS,CAExF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,sBAAsB,EAAE,CAE5D;AAED;;GAEG;AACH,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,IAAI,CAAuB;gBAEf,QAAQ,GAAE,MAA2C;IAIzE;;OAEG;IACH,MAAM,IAAI,IAAI;IAYd;;OAEG;IACH,OAAO,CAAC,IAAI;IASZ;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIjD;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,GAAG,IAAI;IAKvD;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B;;OAEG;IACH,IAAI,IAAI,MAAM,EAAE;IAIhB;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKrC;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAK1C;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKrD;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAOrE;;;;OAIG;IACH,wBAAwB,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI;IAWnF;;OAEG;IACG,KAAK,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvF;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI9B;;OAEG;IACG,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CA8BjE"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/auth/storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EACV,cAAc,EAEd,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CASnE,CAAC;AAWF;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,eAAe,GAAG,sBAAsB,GAAG,SAAS,CAExF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,sBAAsB,EAAE,CAE5D;AAED;;GAEG;AACH,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ;IAH5B,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,eAAe,CAAkD;gBAErD,QAAQ,GAAE,MAA2C;IAIzE;;OAEG;IACH,MAAM,IAAI,IAAI;IAYd;;OAEG;IACH,OAAO,CAAC,IAAI;IASZ;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIjD;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,GAAG,IAAI;IAKvD;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B;;OAEG;IACH,IAAI,IAAI,MAAM,EAAE;IAIhB;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKrC;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAK1C;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKrD;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAOrE;;;;OAIG;IACH,wBAAwB,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI;IAWnF;;OAEG;IACG,KAAK,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvF;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI9B;;OAEG;IACG,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAuCjE"}