@mastra/factory 0.0.0-esbuild-bundle-worker-20260807173433

package/dist/routes/config.d.ts

@@ -0,0 +1,235 @@
+import type { AuthStorage } from '@mastra/code-sdk/auth/storage';
+import type { ModePack, ProviderAccess } from '@mastra/code-sdk/onboarding/packs';
+import type { ApiRoute } from '@mastra/core/server';
+import type { CredentialRecord, LoginSessionKind, ModelCredentialsStorage } from '../storage/domains/credentials/base.js';
+import type { CustomProvidersStorage } from '../storage/domains/custom-providers/base.js';
+import type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';
+import type { ModelPacksStorage } from '../storage/domains/model-packs/base.js';
+import { Route } from './route.js';
+import type { RouteDependencies } from './route.js';
+/**
+ * Server-side configuration routes for the web app.
+ *
+ * The browser has no access to the credential store or the model catalog, so
+ * the web settings panel asks the server — which owns both — to list providers
+ * and manage API keys. This mirrors the TUI's `/api-keys` command, exposing the
+ * same `AuthStorage`-backed key management over HTTP.
+ *
+ * Keys are never returned to the client; only their presence and source.
+ */
+/**
+ * Where a provider's active credential comes from, as seen by the caller.
+ * Local mode reports `oauth`/`stored` (server-global `auth.json`); tenant mode
+ * reports the scoped variants (`oauth-user`/`stored-user`/`stored-org`).
+ */
+export type ProviderCredentialSource = 'oauth' | 'stored' | 'env' | 'none' | 'oauth-user' | 'stored-user' | 'stored-org';
+/** A model provider with the current source of its credentials. */
+export interface ProviderInfo {
+    provider: string;
+    /** Env var the provider's key is read from, if any. */
+    envVar?: string;
+    /** Where the active credential comes from. */
+    source: ProviderCredentialSource;
+    /**
+     * Tenant mode: whether an org-wide API key exists for this provider, even
+     * when the caller's personal credential shadows it. Lets the UI tell
+     * "shared with the org" apart from "only works for me".
+     */
+    orgKey?: boolean;
+    /** Web OAuth sign-in capability, when the provider supports it. */
+    oauth?: {
+        supported: true;
+        modes: LoginSessionKind[];
+    };
+}
+/** Minimal session surface a pack activation touches. */
+interface PackSession {
+    mode: {
+        get: () => string;
+    };
+    model: {
+        switch: (args: {
+            modelId: string;
+        }) => Promise<void>;
+    };
+    subagents: {
+        model: {
+            set: (args: {
+                modelId: string;
+                agentType: string;
+            }) => Promise<void>;
+        };
+    };
+    thread: {
+        getId: () => string | null;
+        setSetting: (args: {
+            key: string;
+            value: unknown;
+        }) => Promise<void>;
+        list: () => Promise<Array<{
+            id: string;
+            metadata?: Record<string, unknown>;
+        }>>;
+    };
+}
+/** One observational-memory role's read/switch surface. */
+interface OMRole {
+    modelId: () => string | undefined;
+    threshold: () => number | undefined;
+    switchModel: (args: {
+        modelId: string;
+    }) => Promise<void>;
+}
+/**
+ * Session-state fields the OM config routes write. The index signatures mirror
+ * `MastraCodeState` so the concrete `Session.state.set(Partial<MastraCodeState>)`
+ * stays assignable to this minimal surface (contravariant parameter check).
+ */
+interface OMStateWrites {
+    [key: string]: unknown;
+    [key: `subagentModelId_${string}`]: string | undefined;
+    observationThreshold?: number;
+    reflectionThreshold?: number;
+    observeAttachments?: 'auto' | boolean;
+}
+/** Minimal session surface the OM config routes touch. */
+export interface OMSession extends PackSession {
+    state: {
+        get: () => Record<string, unknown> | undefined;
+        set: (updates: OMStateWrites) => Promise<void> | void;
+    };
+    om: {
+        observer: OMRole;
+        reflector: OMRole;
+    };
+}
+/** Minimal controller surface this module needs (model catalog + modes + sessions). */
+interface ModelCatalog {
+    listAvailableModels: () => Promise<Array<{
+        id?: string;
+        modelName?: string;
+        provider: string;
+        hasApiKey: boolean;
+        apiKeyEnvVar?: string;
+    }>>;
+    listModes?: () => Array<{
+        id: string;
+        defaultModelId?: string;
+    }>;
+    getSessionByResource?: (resourceId: string, scope?: string) => Promise<OMSession | undefined>;
+}
+/**
+ * Build a deduplicated, sorted list of providers from the model catalog,
+ * annotated with where each provider's credential currently comes from.
+ * Mirrors the TUI's `/api-keys` provider list.
+ *
+ * When `tenantCredentials` is given (deployed mode), sources reflect the
+ * *caller's* tenant rows with user > org precedence and the server-global
+ * `authStorage` is ignored; otherwise the local `auth.json` view is reported.
+ */
+export declare function listProviders({ controller, authStorage, tenantCredentials, }: {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    tenantCredentials?: CredentialRecord[];
+}): Promise<ProviderInfo[]>;
+/** A user-defined OpenAI-compatible provider, with key presence (never the key). */
+export interface CustomProviderInfo {
+    id: string;
+    name: string;
+    url: string;
+    hasApiKey: boolean;
+    models: string[];
+}
+/** A model pack as surfaced to the web client, with an `active` flag. */
+export interface ModelPackInfo extends ModePack {
+    custom: boolean;
+    active: boolean;
+}
+/**
+ * Compute which providers the user can reach, mirroring the TUI's
+ * `/models-pack` access derivation: OAuth/api-key from the credential store for
+ * the named providers, plus any other provider that has a usable key.
+ */
+export declare function buildProviderAccess({ controller, authStorage, tenantCredentials, }: {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    tenantCredentials?: CredentialRecord[];
+}): Promise<ProviderAccess>;
+/**
+ * Where a request's custom model packs live. Same posture as memory settings
+ * and custom providers: the `model-packs` factory storage domain, scoped per
+ * org in deployed mode and to a sentinel `local` org in no-auth mode — never
+ * settings.json.
+ */
+export interface PackContext {
+    storage: ModelPacksStorage;
+    orgId: string;
+    userId: string;
+}
+/**
+ * List available model packs (built-in, gated by provider access, plus saved
+ * custom packs from the request's pack context). Drops the synthetic
+ * "New Custom" placeholder — the web client has its own create flow. `active`
+ * is set from the given session's thread when a resourceId is supplied.
+ */
+export declare function listModelPacks({ controller, authStorage, tenantCredentials, packContext, activePackId, }: {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    tenantCredentials?: CredentialRecord[];
+    packContext: PackContext;
+    activePackId?: string | null;
+}): Promise<ModelPackInfo[]>;
+/** Read the current OM config from a session. */
+export interface OMConfigInfo {
+    observerModelId: string;
+    reflectorModelId: string;
+    observationThreshold: number;
+    reflectionThreshold: number;
+    observeAttachments: 'auto' | boolean;
+}
+export interface ProviderOMDefaultsResponse {
+    ok: true;
+    config: OMConfigInfo;
+}
+export declare function readOMConfig(session: OMSession): OMConfigInfo;
+/** Dependencies injected into {@link ConfigRoutes}. */
+export interface ConfigRoutesDeps extends RouteDependencies {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    /** Tenant credential domain handle; absent in local (no-DB) mode. */
+    modelCredentials?: ModelCredentialsStorage;
+    /** Tenant model-packs domain handle; absent in local (no-DB) mode. */
+    modelPacks?: ModelPacksStorage;
+    /** Tenant memory-settings domain handle; absent in local (no-DB) mode. */
+    memorySettings?: MemorySettingsStorage;
+    /** Custom-providers domain handle; absent when the app database is missing. */
+    customProviders?: CustomProvidersStorage;
+    /** Notifies the host after tenant credentials change so caches can be dropped. */
+    onCredentialsChanged?: (tenant: {
+        orgId: string;
+        userId?: string;
+    }) => void;
+    /** Notifies the host after custom providers change so model-router caches can be dropped. */
+    onCustomProvidersChanged?: (tenant: {
+        orgId: string;
+    }) => void;
+}
+/**
+ * The web config routes as Mastra `apiRoutes`:
+ *   - `GET    /web/config/providers`              — list providers + key source
+ *   - `PUT    /web/config/providers/:provider/key` — set/update a provider's API key
+ *   - `DELETE /web/config/providers/:provider/key` — remove a stored API key
+ *   - `GET    /web/config/models`                  — list available models (credentialed providers)
+ *   - `GET    /web/config/custom-providers`        — list custom OpenAI-compatible providers
+ *   - `POST   /web/config/custom-providers`        — create/update a custom provider
+ *   - `DELETE /web/config/custom-providers/:id`    — remove a custom provider
+ *   - `GET    /web/config/om`                      — read OM models/thresholds/observe-attachments
+ *   - `PUT    /web/config/om/:role/model`          — switch observer/reflector model
+ *   - `PUT    /web/config/om/thresholds`           — set observation/reflection thresholds
+ *   - `PUT    /web/config/om/observe-attachments`  — set observe-attachments (auto/on/off)
+ */
+export declare class ConfigRoutes extends Route<ConfigRoutesDeps> {
+    routes(): ApiRoute[];
+}
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAuB,MAAM,mCAAmC,CAAC;AAGvG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAwB,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChH,OAAO,KAAK,EAIV,qBAAqB,EACtB,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAmB,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAQjG,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,KAAK,EAAa,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAO/D;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC,OAAO,GACP,QAAQ,GACR,KAAK,GACL,MAAM,GACN,YAAY,GACZ,aAAa,GACb,YAAY,CAAC;AAEjB,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,MAAM,EAAE,wBAAwB,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;CACxD;AAED,yDAAyD;AACzD,UAAU,WAAW;IACnB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAChE,SAAS,EAAE;QAAE,KAAK,EAAE;YAAE,GAAG,EAAE,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAC/F,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC,CAAC;KAChF,CAAC;CACH;AAED,2DAA2D;AAC3D,UAAU,MAAM;IACd,OAAO,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED;;;;GAIG;AACH,UAAU,aAAa;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,CAAC,GAAG,EAAE,mBAAmB,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IACvD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACvC;AAED,0DAA0D;AAC1D,MAAM,WAAW,SAAU,SAAQ,WAAW;IAC5C,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAC/C,GAAG,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;KACvD,CAAC;IACF,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,uFAAuF;AACvF,UAAU,YAAY;IACpB,mBAAmB,EAAE,MAAM,OAAO,CAChC,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CACxG,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,oBAAoB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;CAC/F;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,EAClC,UAAU,EACV,WAAW,EACX,iBAAiB,GAClB,EAAE;IACD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA0C1B;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAmFD,yEAAyE;AACzE,MAAM,WAAW,aAAc,SAAQ,QAAQ;IAC7C,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,UAAU,EACV,WAAW,EACX,iBAAiB,GAClB,EAAE;IACD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,cAAc,CAAC,CAqC1B;AAMD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAyCD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,EACnC,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,GACb,EAAE;IACD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAa3B;AA8DD,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,GAAG,YAAY,CAU7D;AAmGD,uDAAuD;AACvD,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,sEAAsE;IACtE,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,+EAA+E;IAC/E,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5E,6FAA6F;IAC7F,wBAAwB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAChE;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAa,SAAQ,KAAK,CAAC,gBAAgB,CAAC;IACvD,MAAM,IAAI,QAAQ,EAAE;CAsnBrB"}