@mastra/factory 0.2.2-alpha.1 → 0.2.2-alpha.2

package/dist/routes/custom-provider-source.js

@@ -1,107 +1,124 @@
-// src/routes/custom-provider-source.ts
+import { tenantOrgId } from "./provider-credentials.js";
 import { setCustomProvidersSource } from "@mastra/code-sdk/agents/custom-provider-source";
-
-// src/routes/provider-credentials.ts
-function tenantOrgId(tenant) {
-  return tenant.orgId ?? `user:${tenant.userId}`;
-}
-
-// src/routes/custom-provider-source.ts
-var SNAPSHOT_TTL_MS = 15e3;
-var MAX_CACHED_ORGS = 1e3;
-var LOCAL_ORG = "local";
+//#region src/routes/custom-provider-source.ts
+/**
+* DB-backed custom providers source for model resolution (factory mode).
+*
+* The SDK's `resolveModel` and gateway catalog ask the registered
+* `CustomProvidersSource` synchronously, so this module keeps a small per-org
+* **snapshot** of custom provider rows hydrated from the `custom-providers`
+* domain. Once registered the source is authoritative — the factory never
+* reads `settings.json` custom providers, in either auth mode:
+*
+* - tenant mode: rows are scoped per org (`tenantOrgId`); calls without an
+*   authenticated tenant (boot-time catalog) resolve to an empty list.
+* - no-auth/local mode: rows live under the sentinel `local` org, matching the
+*   custom provider routes.
+*
+* Snapshots are primed per request by `createCustomProvidersPrimer` (mounted
+* after the web auth gate) and invalidated on writes via
+* `invalidateCustomProvidersSnapshots` so changes are visible immediately.
+*/
+/** How long a hydrated snapshot is considered fresh. */
+const SNAPSHOT_TTL_MS = 15e3;
+/** Cap on cached org snapshots; oldest-inserted evicted beyond this. */
+const MAX_CACHED_ORGS = 1e3;
+/** Sentinel org for no-auth mode — must match the custom provider routes. */
+const LOCAL_ORG = "local";
 var OrgCustomProvidersSnapshot = class {
-  #orgId;
-  #storage;
-  #snapshot = [];
-  #fetchedAt = 0;
-  #hydrating;
-  constructor(orgId, storage) {
-    this.#orgId = orgId;
-    this.#storage = storage;
-  }
-  /** Hydrate the snapshot when stale; coalesces concurrent callers. */
-  async ensureFresh(now = Date.now()) {
-    if (now - this.#fetchedAt < SNAPSHOT_TTL_MS) return;
-    this.#hydrating ??= this.#hydrate().finally(() => {
-      this.#hydrating = void 0;
-    });
-    await this.#hydrating;
-  }
-  async #hydrate() {
-    await this.#storage.ensureReady();
-    const records = await this.#storage.list({ orgId: this.#orgId });
-    this.#snapshot = records.map((record) => ({
-      name: record.name,
-      url: record.url,
-      apiKey: record.apiKey ?? void 0,
-      models: record.models
-    }));
-    this.#fetchedAt = Date.now();
-  }
-  /** Sync by contract; kicks a background re-hydrate when the snapshot is stale. */
-  get() {
-    if (Date.now() - this.#fetchedAt >= SNAPSHOT_TTL_MS) {
-      void this.ensureFresh().catch(() => {
-      });
-    }
-    return this.#snapshot;
-  }
+	#orgId;
+	#storage;
+	#snapshot = [];
+	#fetchedAt = 0;
+	#hydrating;
+	constructor(orgId, storage) {
+		this.#orgId = orgId;
+		this.#storage = storage;
+	}
+	/** Hydrate the snapshot when stale; coalesces concurrent callers. */
+	async ensureFresh(now = Date.now()) {
+		if (now - this.#fetchedAt < SNAPSHOT_TTL_MS) return;
+		this.#hydrating ??= this.#hydrate().finally(() => {
+			this.#hydrating = void 0;
+		});
+		await this.#hydrating;
+	}
+	async #hydrate() {
+		await this.#storage.ensureReady();
+		const records = await this.#storage.list({ orgId: this.#orgId });
+		this.#snapshot = records.map((record) => ({
+			name: record.name,
+			url: record.url,
+			apiKey: record.apiKey ?? void 0,
+			models: record.models
+		}));
+		this.#fetchedAt = Date.now();
+	}
+	/** Sync by contract; kicks a background re-hydrate when the snapshot is stale. */
+	get() {
+		if (Date.now() - this.#fetchedAt >= SNAPSHOT_TTL_MS) this.ensureFresh().catch(() => {});
+		return this.#snapshot;
+	}
 };
-var orgSnapshots = /* @__PURE__ */ new Map();
+const orgSnapshots = /* @__PURE__ */ new Map();
 function snapshotFor(orgId, storage) {
-  let snapshot = orgSnapshots.get(orgId);
-  if (!snapshot) {
-    if (orgSnapshots.size >= MAX_CACHED_ORGS) {
-      const oldest = orgSnapshots.keys().next().value;
-      if (oldest !== void 0) orgSnapshots.delete(oldest);
-    }
-    snapshot = new OrgCustomProvidersSnapshot(orgId, storage);
-    orgSnapshots.set(orgId, snapshot);
-  }
-  return snapshot;
+	let snapshot = orgSnapshots.get(orgId);
+	if (!snapshot) {
+		if (orgSnapshots.size >= MAX_CACHED_ORGS) {
+			const oldest = orgSnapshots.keys().next().value;
+			if (oldest !== void 0) orgSnapshots.delete(oldest);
+		}
+		snapshot = new OrgCustomProvidersSnapshot(orgId, storage);
+		orgSnapshots.set(orgId, snapshot);
+	}
+	return snapshot;
 }
+/** The org a call resolves to, or `undefined` to fail closed (tenant mode without identity). */
 function orgForTenant(tenant, authEnabled) {
-  if (!authEnabled) return LOCAL_ORG;
-  return tenant ? tenantOrgId(tenant) : void 0;
+	if (!authEnabled) return LOCAL_ORG;
+	return tenant ? tenantOrgId(tenant) : void 0;
 }
-function registerCustomProvidersSource({
-  storage,
-  authEnabled
-}) {
-  setCustomProvidersSource((tenant) => {
-    const orgId = orgForTenant(tenant, authEnabled);
-    if (!orgId) return [];
-    return snapshotFor(orgId, storage).get();
-  });
+/**
+* Register the DB-backed custom providers source with the SDK. Called by the
+* factory after storage init with the `custom-providers` domain handle; from
+* then on model resolution and the gateway catalog never read settings.json
+* custom providers.
+*/
+function registerCustomProvidersSource({ storage, authEnabled }) {
+	setCustomProvidersSource((tenant) => {
+		const orgId = orgForTenant(tenant, authEnabled);
+		if (!orgId) return [];
+		return snapshotFor(orgId, storage).get();
+	});
 }
+/**
+* Drop the org's cached snapshot after a custom provider write so the change
+* is visible to the next model call immediately instead of after the TTL.
+*/
 function invalidateCustomProvidersSnapshots(tenant) {
-  orgSnapshots.delete(tenant.orgId);
+	orgSnapshots.delete(tenant.orgId);
 }
+/** Test hook: clear registration and cached org snapshots. */
 function resetCustomProvidersSourceForTests() {
-  setCustomProvidersSource(void 0);
-  orgSnapshots.clear();
+	setCustomProvidersSource(void 0);
+	orgSnapshots.clear();
 }
-function createCustomProvidersPrimer({
-  auth,
-  storage,
-  authEnabled
-}) {
-  return async (c, next) => {
-    const orgId = orgForTenant(auth.tenant(c), authEnabled);
-    if (orgId) {
-      try {
-        await snapshotFor(orgId, storage).ensureFresh();
-      } catch {
-      }
-    }
-    await next();
-  };
+/**
+* Middleware mounted after the web auth gate: primes the caller's org snapshot
+* so the request's first model call sees their custom providers without an
+* async seam in model resolution. Cheap when fresh (TTL check), best-effort
+* when not — a failed hydrate serves the last snapshot, never blocks a request.
+*/
+function createCustomProvidersPrimer({ auth, storage, authEnabled }) {
+	return async (c, next) => {
+		const orgId = orgForTenant(auth.tenant(c), authEnabled);
+		if (orgId) try {
+			await snapshotFor(orgId, storage).ensureFresh();
+		} catch {}
+		await next();
+	};
 }
-export {
-  createCustomProvidersPrimer,
-  invalidateCustomProvidersSnapshots,
-  registerCustomProvidersSource,
-  resetCustomProvidersSourceForTests
-};
+//#endregion
+export { createCustomProvidersPrimer, invalidateCustomProvidersSnapshots, registerCustomProvidersSource, resetCustomProvidersSourceForTests };
+
 //# sourceMappingURL=custom-provider-source.js.map

package/dist/routes/custom-provider-source.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/routes/custom-provider-source.ts","../../src/routes/provider-credentials.ts"],"sourcesContent":["/**\n * DB-backed custom providers source for model resolution (factory mode).\n *\n * The SDK's `resolveModel` and gateway catalog ask the registered\n * `CustomProvidersSource` synchronously, so this module keeps a small per-org\n * **snapshot** of custom provider rows hydrated from the `custom-providers`\n * domain. Once registered the source is authoritative — the factory never\n * reads `settings.json` custom providers, in either auth mode:\n *\n * - tenant mode: rows are scoped per org (`tenantOrgId`); calls without an\n *   authenticated tenant (boot-time catalog) resolve to an empty list.\n * - no-auth/local mode: rows live under the sentinel `local` org, matching the\n *   custom provider routes.\n *\n * Snapshots are primed per request by `createCustomProvidersPrimer` (mounted\n * after the web auth gate) and invalidated on writes via\n * `invalidateCustomProvidersSnapshots` so changes are visible immediately.\n */\n\nimport { setCustomProvidersSource } from '@mastra/code-sdk/agents/custom-provider-source';\nimport type { MastraCodeCustomProvider } from '@mastra/code-sdk/agents/mastracode-gateway';\nimport type { MiddlewareHandler } from 'hono';\n\nimport type { CustomProvidersStorage } from '../storage/domains/custom-providers/base.js';\nimport { tenantOrgId } from './provider-credentials.js';\nimport type { RouteAuth } from './route.js';\n\n/** How long a hydrated snapshot is considered fresh. */\nconst SNAPSHOT_TTL_MS = 15_000;\n\n/** Cap on cached org snapshots; oldest-inserted evicted beyond this. */\nconst MAX_CACHED_ORGS = 1000;\n\n/** Sentinel org for no-auth mode — must match the custom provider routes. */\nconst LOCAL_ORG = 'local';\n\nclass OrgCustomProvidersSnapshot {\n  readonly #orgId: string;\n  readonly #storage: CustomProvidersStorage;\n  #snapshot: MastraCodeCustomProvider[] = [];\n  #fetchedAt = 0;\n  #hydrating: Promise<void> | undefined;\n\n  constructor(orgId: string, storage: CustomProvidersStorage) {\n    this.#orgId = orgId;\n    this.#storage = storage;\n  }\n\n  /** Hydrate the snapshot when stale; coalesces concurrent callers. */\n  async ensureFresh(now = Date.now()): Promise<void> {\n    if (now - this.#fetchedAt < SNAPSHOT_TTL_MS) return;\n    this.#hydrating ??= this.#hydrate().finally(() => {\n      this.#hydrating = undefined;\n    });\n    await this.#hydrating;\n  }\n\n  async #hydrate(): Promise<void> {\n    await this.#storage.ensureReady();\n    const records = await this.#storage.list({ orgId: this.#orgId });\n    this.#snapshot = records.map(record => ({\n      name: record.name,\n      url: record.url,\n      apiKey: record.apiKey ?? undefined,\n      models: record.models,\n    }));\n    this.#fetchedAt = Date.now();\n  }\n\n  /** Sync by contract; kicks a background re-hydrate when the snapshot is stale. */\n  get(): MastraCodeCustomProvider[] {\n    if (Date.now() - this.#fetchedAt >= SNAPSHOT_TTL_MS) {\n      void this.ensureFresh().catch(() => {});\n    }\n    return this.#snapshot;\n  }\n}\n\nconst orgSnapshots = new Map<string, OrgCustomProvidersSnapshot>();\n\nfunction snapshotFor(orgId: string, storage: CustomProvidersStorage): OrgCustomProvidersSnapshot {\n  let snapshot = orgSnapshots.get(orgId);\n  if (!snapshot) {\n    if (orgSnapshots.size >= MAX_CACHED_ORGS) {\n      const oldest = orgSnapshots.keys().next().value;\n      if (oldest !== undefined) orgSnapshots.delete(oldest);\n    }\n    snapshot = new OrgCustomProvidersSnapshot(orgId, storage);\n    orgSnapshots.set(orgId, snapshot);\n  }\n  return snapshot;\n}\n\n/** The org a call resolves to, or `undefined` to fail closed (tenant mode without identity). */\nfunction orgForTenant(\n  tenant: { orgId?: string; userId: string } | undefined,\n  authEnabled: boolean,\n): string | undefined {\n  if (!authEnabled) return LOCAL_ORG;\n  return tenant ? tenantOrgId(tenant) : undefined;\n}\n\n/**\n * Register the DB-backed custom providers source with the SDK. Called by the\n * factory after storage init with the `custom-providers` domain handle; from\n * then on model resolution and the gateway catalog never read settings.json\n * custom providers.\n */\nexport function registerCustomProvidersSource({\n  storage,\n  authEnabled,\n}: {\n  storage: CustomProvidersStorage;\n  authEnabled: boolean;\n}): void {\n  setCustomProvidersSource(tenant => {\n    const orgId = orgForTenant(tenant, authEnabled);\n    if (!orgId) return [];\n    return snapshotFor(orgId, storage).get();\n  });\n}\n\n/**\n * Drop the org's cached snapshot after a custom provider write so the change\n * is visible to the next model call immediately instead of after the TTL.\n */\nexport function invalidateCustomProvidersSnapshots(tenant: { orgId: string }): void {\n  orgSnapshots.delete(tenant.orgId);\n}\n\n/** Test hook: clear registration and cached org snapshots. */\nexport function resetCustomProvidersSourceForTests(): void {\n  setCustomProvidersSource(undefined);\n  orgSnapshots.clear();\n}\n\n/**\n * Middleware mounted after the web auth gate: primes the caller's org snapshot\n * so the request's first model call sees their custom providers without an\n * async seam in model resolution. Cheap when fresh (TTL check), best-effort\n * when not — a failed hydrate serves the last snapshot, never blocks a request.\n */\nexport function createCustomProvidersPrimer({\n  auth,\n  storage,\n  authEnabled,\n}: {\n  auth: RouteAuth;\n  storage: CustomProvidersStorage;\n  authEnabled: boolean;\n}): MiddlewareHandler {\n  return async (c, next) => {\n    const orgId = orgForTenant(auth.tenant(c), authEnabled);\n    if (orgId) {\n      try {\n        await snapshotFor(orgId, storage).ensureFresh();\n      } catch {\n        // Fail open: model calls serve the last snapshot (or none).\n      }\n    }\n    await next();\n  };\n}\n","/**\n * Per-request model-provider credential context.\n *\n * The provider config/OAuth routes serve two deployment shapes:\n *\n * - **Local** (no web auth adapter): credentials live in the server-global\n *   file-backed `AuthStorage` (`auth.json`) — unchanged TUI behavior.\n * - **Tenant** (auth adapter active): credentials live in the\n *   `model-credentials` factory storage domain, scoped per `(orgId, userId)`\n *   with optional org-wide rows (`userId` absent).\n *\n * `resolveCredentialContext` decides which shape a request is in: an\n * authenticated user always gets the tenant path; an unauthenticated request\n * is rejected when auth is enabled and falls back to local otherwise.\n */\n\nimport type { Context } from 'hono';\n\nimport type {\n  CredentialRecord,\n  LoginSessionKind,\n  ModelCredentialsStorage,\n} from '../storage/domains/credentials/base.js';\nimport type { RouteAuth } from './route.js';\n\n/**\n * OAuth credentials are stored under the auth provider id, which differs from\n * the catalog provider id for OpenAI (stored as `openai-codex`). Tenant rows\n * use the same keying so one lookup serves both OAuth tokens and API keys.\n */\nexport function getAuthProviderId(provider: string): string {\n  return provider === 'openai' ? 'openai-codex' : provider;\n}\n\n/**\n * Providers that support a browser-driven OAuth sign-in flow, keyed by\n * *catalog* provider id (what the routes and settings UI use). All flows need\n * no inbound connection to the server: Anthropic uses paste-code PKCE, the\n * rest use RFC 8628-style device codes.\n */\nexport const WEB_OAUTH_FLOW_KINDS: Readonly<Record<string, LoginSessionKind>> = {\n  anthropic: 'paste-code',\n  openai: 'device-code',\n  'github-copilot': 'device-code',\n  xai: 'device-code',\n};\n\nexport type CredentialContext =\n  | { mode: 'local' }\n  | { mode: 'tenant'; storage: ModelCredentialsStorage; orgId: string; userId: string };\n\n/**\n * The tenant credentials domain, when registered and ready. `undefined` means\n * the factory never ran (no handle threaded in) or the domain's init failed\n * (fail-soft — callers report the feature unavailable instead of crashing).\n */\nexport async function getTenantCredentialsStorage(\n  credentials: ModelCredentialsStorage | undefined,\n): Promise<ModelCredentialsStorage | undefined> {\n  if (!credentials) return undefined;\n  try {\n    await credentials.ensureReady();\n  } catch {\n    return undefined;\n  }\n  return credentials;\n}\n\n/**\n * Org key for tenant rows. Personal accounts get an org bootstrapped by the\n * auth adapter (`ensureOrg`); if one still isn't present, scope rows under a\n * per-user synthetic org so credentials never become server-global.\n */\nexport function tenantOrgId(tenant: { orgId?: string; userId: string }): string {\n  return tenant.orgId ?? `user:${tenant.userId}`;\n}\n\n/**\n * Resolve the credential context for a request, or a ready-to-return error\n * response. Mutating credential routes call this and hard-fail (401/503)\n * when the tenant path is required but unavailable.\n */\nexport async function resolveCredentialContext({\n  c,\n  auth,\n  credentials,\n}: {\n  c: Context;\n  auth: RouteAuth;\n  /** Tenant credential domain handle; absent in local (no-DB) mode. */\n  credentials?: ModelCredentialsStorage;\n}): Promise<CredentialContext | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) {\n    // When an auth provider is active, credential operations always require a\n    // signed-in caller — otherwise one anonymous request could write keys for\n    // everyone. Without a provider this is a single-user local server.\n    if (auth.enabled()) return { response: c.json({ error: 'unauthorized' }, 401) };\n    return { mode: 'local' };\n  }\n  const storage = await getTenantCredentialsStorage(credentials);\n  if (!storage) {\n    return {\n      response: c.json(\n        {\n          error: 'credentials_unavailable',\n          message: 'Tenant credential storage is unavailable — the app database is not configured or failed to start.',\n        },\n        503,\n      ),\n    };\n  }\n  return { mode: 'tenant', storage, orgId: tenantOrgId(tenant), userId: tenant.userId };\n}\n\n/**\n * List the caller's tenant credential records for provider listing, or\n * `undefined` in local mode (caller should fall back to `AuthStorage`).\n * Read-only and degradation-friendly: an authenticated caller with the domain\n * unavailable gets an empty list (sources show `env`/`none`) instead of a 503\n * so the settings page still renders.\n */\nexport async function listTenantCredentialsForRequest({\n  c,\n  auth,\n  credentials,\n}: {\n  c: Context;\n  auth: RouteAuth;\n  /** Tenant credential domain handle; absent in local (no-DB) mode. */\n  credentials?: ModelCredentialsStorage;\n}): Promise<CredentialRecord[] | undefined> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return auth.enabled() ? [] : undefined;\n  const storage = await getTenantCredentialsStorage(credentials);\n  if (!storage) return [];\n  return storage.listCredentials(tenantOrgId(tenant), tenant.userId);\n}\n"],"mappings":";AAmBA,SAAS,gCAAgC;;;ACsDlC,SAAS,YAAY,QAAoD;AAC9E,SAAO,OAAO,SAAS,QAAQ,OAAO,MAAM;AAC9C;;;AD/CA,IAAM,kBAAkB;AAGxB,IAAM,kBAAkB;AAGxB,IAAM,YAAY;AAElB,IAAM,6BAAN,MAAiC;AAAA,EACtB;AAAA,EACA;AAAA,EACT,YAAwC,CAAC;AAAA,EACzC,aAAa;AAAA,EACb;AAAA,EAEA,YAAY,OAAe,SAAiC;AAC1D,SAAK,SAAS;AACd,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA,EAGA,MAAM,YAAY,MAAM,KAAK,IAAI,GAAkB;AACjD,QAAI,MAAM,KAAK,aAAa,gBAAiB;AAC7C,SAAK,eAAe,KAAK,SAAS,EAAE,QAAQ,MAAM;AAChD,WAAK,aAAa;AAAA,IACpB,CAAC;AACD,UAAM,KAAK;AAAA,EACb;AAAA,EAEA,MAAM,WAA0B;AAC9B,UAAM,KAAK,SAAS,YAAY;AAChC,UAAM,UAAU,MAAM,KAAK,SAAS,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAC/D,SAAK,YAAY,QAAQ,IAAI,aAAW;AAAA,MACtC,MAAM,OAAO;AAAA,MACb,KAAK,OAAO;AAAA,MACZ,QAAQ,OAAO,UAAU;AAAA,MACzB,QAAQ,OAAO;AAAA,IACjB,EAAE;AACF,SAAK,aAAa,KAAK,IAAI;AAAA,EAC7B;AAAA;AAAA,EAGA,MAAkC;AAChC,QAAI,KAAK,IAAI,IAAI,KAAK,cAAc,iBAAiB;AACnD,WAAK,KAAK,YAAY,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACxC;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAEA,IAAM,eAAe,oBAAI,IAAwC;AAEjE,SAAS,YAAY,OAAe,SAA6D;AAC/F,MAAI,WAAW,aAAa,IAAI,KAAK;AACrC,MAAI,CAAC,UAAU;AACb,QAAI,aAAa,QAAQ,iBAAiB;AACxC,YAAM,SAAS,aAAa,KAAK,EAAE,KAAK,EAAE;AAC1C,UAAI,WAAW,OAAW,cAAa,OAAO,MAAM;AAAA,IACtD;AACA,eAAW,IAAI,2BAA2B,OAAO,OAAO;AACxD,iBAAa,IAAI,OAAO,QAAQ;AAAA,EAClC;AACA,SAAO;AACT;AAGA,SAAS,aACP,QACA,aACoB;AACpB,MAAI,CAAC,YAAa,QAAO;AACzB,SAAO,SAAS,YAAY,MAAM,IAAI;AACxC;AAQO,SAAS,8BAA8B;AAAA,EAC5C;AAAA,EACA;AACF,GAGS;AACP,2BAAyB,YAAU;AACjC,UAAM,QAAQ,aAAa,QAAQ,WAAW;AAC9C,QAAI,CAAC,MAAO,QAAO,CAAC;AACpB,WAAO,YAAY,OAAO,OAAO,EAAE,IAAI;AAAA,EACzC,CAAC;AACH;AAMO,SAAS,mCAAmC,QAAiC;AAClF,eAAa,OAAO,OAAO,KAAK;AAClC;AAGO,SAAS,qCAA2C;AACzD,2BAAyB,MAAS;AAClC,eAAa,MAAM;AACrB;AAQO,SAAS,4BAA4B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AACF,GAIsB;AACpB,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,QAAQ,aAAa,KAAK,OAAO,CAAC,GAAG,WAAW;AACtD,QAAI,OAAO;AACT,UAAI;AACF,cAAM,YAAY,OAAO,OAAO,EAAE,YAAY;AAAA,MAChD,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,KAAK;AAAA,EACb;AACF;","names":[]}
+{"version":3,"file":"custom-provider-source.js","names":["#orgId","#storage","#fetchedAt","#hydrating","#hydrate","#snapshot"],"sources":["../../src/routes/custom-provider-source.ts"],"sourcesContent":["/**\n * DB-backed custom providers source for model resolution (factory mode).\n *\n * The SDK's `resolveModel` and gateway catalog ask the registered\n * `CustomProvidersSource` synchronously, so this module keeps a small per-org\n * **snapshot** of custom provider rows hydrated from the `custom-providers`\n * domain. Once registered the source is authoritative — the factory never\n * reads `settings.json` custom providers, in either auth mode:\n *\n * - tenant mode: rows are scoped per org (`tenantOrgId`); calls without an\n *   authenticated tenant (boot-time catalog) resolve to an empty list.\n * - no-auth/local mode: rows live under the sentinel `local` org, matching the\n *   custom provider routes.\n *\n * Snapshots are primed per request by `createCustomProvidersPrimer` (mounted\n * after the web auth gate) and invalidated on writes via\n * `invalidateCustomProvidersSnapshots` so changes are visible immediately.\n */\n\nimport { setCustomProvidersSource } from '@mastra/code-sdk/agents/custom-provider-source';\nimport type { MastraCodeCustomProvider } from '@mastra/code-sdk/agents/mastracode-gateway';\nimport type { MiddlewareHandler } from 'hono';\n\nimport type { CustomProvidersStorage } from '../storage/domains/custom-providers/base.js';\nimport { tenantOrgId } from './provider-credentials.js';\nimport type { RouteAuth } from './route.js';\n\n/** How long a hydrated snapshot is considered fresh. */\nconst SNAPSHOT_TTL_MS = 15_000;\n\n/** Cap on cached org snapshots; oldest-inserted evicted beyond this. */\nconst MAX_CACHED_ORGS = 1000;\n\n/** Sentinel org for no-auth mode — must match the custom provider routes. */\nconst LOCAL_ORG = 'local';\n\nclass OrgCustomProvidersSnapshot {\n  readonly #orgId: string;\n  readonly #storage: CustomProvidersStorage;\n  #snapshot: MastraCodeCustomProvider[] = [];\n  #fetchedAt = 0;\n  #hydrating: Promise<void> | undefined;\n\n  constructor(orgId: string, storage: CustomProvidersStorage) {\n    this.#orgId = orgId;\n    this.#storage = storage;\n  }\n\n  /** Hydrate the snapshot when stale; coalesces concurrent callers. */\n  async ensureFresh(now = Date.now()): Promise<void> {\n    if (now - this.#fetchedAt < SNAPSHOT_TTL_MS) return;\n    this.#hydrating ??= this.#hydrate().finally(() => {\n      this.#hydrating = undefined;\n    });\n    await this.#hydrating;\n  }\n\n  async #hydrate(): Promise<void> {\n    await this.#storage.ensureReady();\n    const records = await this.#storage.list({ orgId: this.#orgId });\n    this.#snapshot = records.map(record => ({\n      name: record.name,\n      url: record.url,\n      apiKey: record.apiKey ?? undefined,\n      models: record.models,\n    }));\n    this.#fetchedAt = Date.now();\n  }\n\n  /** Sync by contract; kicks a background re-hydrate when the snapshot is stale. */\n  get(): MastraCodeCustomProvider[] {\n    if (Date.now() - this.#fetchedAt >= SNAPSHOT_TTL_MS) {\n      void this.ensureFresh().catch(() => {});\n    }\n    return this.#snapshot;\n  }\n}\n\nconst orgSnapshots = new Map<string, OrgCustomProvidersSnapshot>();\n\nfunction snapshotFor(orgId: string, storage: CustomProvidersStorage): OrgCustomProvidersSnapshot {\n  let snapshot = orgSnapshots.get(orgId);\n  if (!snapshot) {\n    if (orgSnapshots.size >= MAX_CACHED_ORGS) {\n      const oldest = orgSnapshots.keys().next().value;\n      if (oldest !== undefined) orgSnapshots.delete(oldest);\n    }\n    snapshot = new OrgCustomProvidersSnapshot(orgId, storage);\n    orgSnapshots.set(orgId, snapshot);\n  }\n  return snapshot;\n}\n\n/** The org a call resolves to, or `undefined` to fail closed (tenant mode without identity). */\nfunction orgForTenant(\n  tenant: { orgId?: string; userId: string } | undefined,\n  authEnabled: boolean,\n): string | undefined {\n  if (!authEnabled) return LOCAL_ORG;\n  return tenant ? tenantOrgId(tenant) : undefined;\n}\n\n/**\n * Register the DB-backed custom providers source with the SDK. Called by the\n * factory after storage init with the `custom-providers` domain handle; from\n * then on model resolution and the gateway catalog never read settings.json\n * custom providers.\n */\nexport function registerCustomProvidersSource({\n  storage,\n  authEnabled,\n}: {\n  storage: CustomProvidersStorage;\n  authEnabled: boolean;\n}): void {\n  setCustomProvidersSource(tenant => {\n    const orgId = orgForTenant(tenant, authEnabled);\n    if (!orgId) return [];\n    return snapshotFor(orgId, storage).get();\n  });\n}\n\n/**\n * Drop the org's cached snapshot after a custom provider write so the change\n * is visible to the next model call immediately instead of after the TTL.\n */\nexport function invalidateCustomProvidersSnapshots(tenant: { orgId: string }): void {\n  orgSnapshots.delete(tenant.orgId);\n}\n\n/** Test hook: clear registration and cached org snapshots. */\nexport function resetCustomProvidersSourceForTests(): void {\n  setCustomProvidersSource(undefined);\n  orgSnapshots.clear();\n}\n\n/**\n * Middleware mounted after the web auth gate: primes the caller's org snapshot\n * so the request's first model call sees their custom providers without an\n * async seam in model resolution. Cheap when fresh (TTL check), best-effort\n * when not — a failed hydrate serves the last snapshot, never blocks a request.\n */\nexport function createCustomProvidersPrimer({\n  auth,\n  storage,\n  authEnabled,\n}: {\n  auth: RouteAuth;\n  storage: CustomProvidersStorage;\n  authEnabled: boolean;\n}): MiddlewareHandler {\n  return async (c, next) => {\n    const orgId = orgForTenant(auth.tenant(c), authEnabled);\n    if (orgId) {\n      try {\n        await snapshotFor(orgId, storage).ensureFresh();\n      } catch {\n        // Fail open: model calls serve the last snapshot (or none).\n      }\n    }\n    await next();\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAM,kBAAkB;;AAGxB,MAAM,kBAAkB;;AAGxB,MAAM,YAAY;AAElB,IAAM,6BAAN,MAAiC;CAC/B;CACA;CACA,YAAwC,CAAC;CACzC,aAAa;CACb;CAEA,YAAY,OAAe,SAAiC;EAC1D,KAAKA,SAAS;EACd,KAAKC,WAAW;CAClB;;CAGA,MAAM,YAAY,MAAM,KAAK,IAAI,GAAkB;EACjD,IAAI,MAAM,KAAKC,aAAa,iBAAiB;EAC7C,KAAKC,eAAe,KAAKC,SAAS,CAAC,CAAC,cAAc;GAChD,KAAKD,aAAa,KAAA;EACpB,CAAC;EACD,MAAM,KAAKA;CACb;CAEA,MAAMC,WAA0B;EAC9B,MAAM,KAAKH,SAAS,YAAY;EAChC,MAAM,UAAU,MAAM,KAAKA,SAAS,KAAK,EAAE,OAAO,KAAKD,OAAO,CAAC;EAC/D,KAAKK,YAAY,QAAQ,KAAI,YAAW;GACtC,MAAM,OAAO;GACb,KAAK,OAAO;GACZ,QAAQ,OAAO,UAAU,KAAA;GACzB,QAAQ,OAAO;EACjB,EAAE;EACF,KAAKH,aAAa,KAAK,IAAI;CAC7B;;CAGA,MAAkC;EAChC,IAAI,KAAK,IAAI,IAAI,KAAKA,cAAc,iBAClC,KAAU,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC;EAExC,OAAO,KAAKG;CACd;AACF;AAEA,MAAM,+BAAe,IAAI,IAAwC;AAEjE,SAAS,YAAY,OAAe,SAA6D;CAC/F,IAAI,WAAW,aAAa,IAAI,KAAK;CACrC,IAAI,CAAC,UAAU;EACb,IAAI,aAAa,QAAQ,iBAAiB;GACxC,MAAM,SAAS,aAAa,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;GAC1C,IAAI,WAAW,KAAA,GAAW,aAAa,OAAO,MAAM;EACtD;EACA,WAAW,IAAI,2BAA2B,OAAO,OAAO;EACxD,aAAa,IAAI,OAAO,QAAQ;CAClC;CACA,OAAO;AACT;;AAGA,SAAS,aACP,QACA,aACoB;CACpB,IAAI,CAAC,aAAa,OAAO;CACzB,OAAO,SAAS,YAAY,MAAM,IAAI,KAAA;AACxC;;;;;;;AAQA,SAAgB,8BAA8B,EAC5C,SACA,eAIO;CACP,0BAAyB,WAAU;EACjC,MAAM,QAAQ,aAAa,QAAQ,WAAW;EAC9C,IAAI,CAAC,OAAO,OAAO,CAAC;EACpB,OAAO,YAAY,OAAO,OAAO,CAAC,CAAC,IAAI;CACzC,CAAC;AACH;;;;;AAMA,SAAgB,mCAAmC,QAAiC;CAClF,aAAa,OAAO,OAAO,KAAK;AAClC;;AAGA,SAAgB,qCAA2C;CACzD,yBAAyB,KAAA,CAAS;CAClC,aAAa,MAAM;AACrB;;;;;;;AAQA,SAAgB,4BAA4B,EAC1C,MACA,SACA,eAKoB;CACpB,OAAO,OAAO,GAAG,SAAS;EACxB,MAAM,QAAQ,aAAa,KAAK,OAAO,CAAC,GAAG,WAAW;EACtD,IAAI,OACF,IAAI;GACF,MAAM,YAAY,OAAO,OAAO,CAAC,CAAC,YAAY;EAChD,QAAQ,CAER;EAEF,MAAM,KAAK;CACb;AACF"}