@gajae-code/ai 0.18.11 → 0.19.0

package/src/providers/google-auth.ts

@@ -15,6 +15,7 @@
  */
 
 import { Buffer } from "node:buffer";
+import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import { $credentialEnv, $envpos, getTrustedHomeDir, isEnoent, logger } from "@gajae-code/utils";
 import type { FetchImpl } from "../types";
@@ -22,6 +23,10 @@ import type { FetchImpl } from "../types";
 const OAUTH_TOKEN_URL = "https://oauth2.googleapis.com/token";
 const STS_TOKEN_URL = "https://sts.googleapis.com/v1/token";
 const METADATA_TOKEN_URL = "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token";
+const METADATA_PROJECT_ID_URL = "http://metadata.google.internal/computeMetadata/v1/project/project-id";
+const METADATA_SERVICE_ACCOUNT_EMAIL_URL =
+	"http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/email";
+const VERTEX_LOCATION_RE = /^[a-z0-9-]+$/;
 const CLOUD_PLATFORM_SCOPE = "https://www.googleapis.com/auth/cloud-platform";
 const JWT_BEARER_GRANT = "urn:ietf:params:oauth:grant-type:jwt-bearer";
 const TOKEN_EXCHANGE_GRANT = "urn:ietf:params:oauth:grant-type:token-exchange";
@@ -37,6 +42,8 @@ interface CachedToken {
 	expiresAtMs: number;
 }
 
+export type VertexCredentialSource = "explicit-file" | "default-file" | "metadata-server";
+
 interface ServiceAccountCredentials {
 	type: "service_account";
 	client_email: string;
@@ -115,6 +122,11 @@ interface TokenResponse {
 const tokenCache = new Map<string, CachedToken>();
 const inflight = new Map<string, Promise<string>>();
 
+/** Match the region-label constraint used before Vertex interpolates a location into the request host. */
+export function isValidVertexLocation(location: string): boolean {
+	return VERTEX_LOCATION_RE.test(location);
+}
+
 function getRefreshSkewMs(): number {
 	return $envpos("GOOGLE_VERTEX_REFRESH_SKEW_MS", 60_000);
 }
@@ -132,6 +144,82 @@ async function readJsonFile<T>(filePath: string): Promise<T | undefined> {
 	}
 }
 
+function isRecord(value: unknown): value is Record<string, unknown> {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+function isNonEmptyString(value: unknown): value is string {
+	return typeof value === "string" && value.trim().length > 0;
+}
+
+function isSubjectTokenFormat(value: unknown): value is SubjectTokenFormat {
+	if (!isRecord(value)) return false;
+	if (value.type !== undefined && value.type !== "text" && value.type !== "json") return false;
+	if (value.subject_token_field_name !== undefined && !isNonEmptyString(value.subject_token_field_name)) return false;
+	return value.type !== "json" || isNonEmptyString(value.subject_token_field_name);
+}
+
+function isCredentialSource(value: unknown): value is CredentialSource {
+	if (!isRecord(value)) return false;
+	if ("file" in value) {
+		return isNonEmptyString(value.file) && (value.format === undefined || isSubjectTokenFormat(value.format));
+	}
+	if ("url" in value) {
+		if (!isNonEmptyString(value.url) || (value.format !== undefined && !isSubjectTokenFormat(value.format)))
+			return false;
+		if (value.headers === undefined) return true;
+		return isRecord(value.headers) && Object.values(value.headers).every(header => typeof header === "string");
+	}
+	if ("executable" in value) {
+		const executable = value.executable;
+		if (!isRecord(executable) || !isNonEmptyString(executable.command)) return false;
+		if (executable.timeout_millis !== undefined && typeof executable.timeout_millis !== "number") {
+			return false;
+		}
+		return executable.output_file === undefined || typeof executable.output_file === "string";
+	}
+	return false;
+}
+
+/** Validate the credential fields required by the ADC resolvers supported here. */
+function isSupportedAdcFileCredentials(value: unknown): value is AdcFileCredentials {
+	if (!isRecord(value)) return false;
+	switch (value.type) {
+		case "service_account":
+			return isNonEmptyString(value.client_email) && isNonEmptyString(value.private_key);
+		case "authorized_user":
+			return (
+				isNonEmptyString(value.client_id) &&
+				isNonEmptyString(value.client_secret) &&
+				isNonEmptyString(value.refresh_token)
+			);
+		case "external_account":
+			return (
+				isNonEmptyString(value.audience) &&
+				isNonEmptyString(value.subject_token_type) &&
+				isCredentialSource(value.credential_source)
+			);
+		default:
+			return false;
+	}
+}
+
+async function isAvailableAdcFileCredentialSource(credentials: AdcFileCredentials): Promise<boolean> {
+	if (credentials.type !== "external_account") return true;
+	const source = credentials.credential_source;
+	if ("executable" in source) return $credentialEnv("GOOGLE_EXTERNAL_ACCOUNT_ALLOW_EXECUTABLES") === "1";
+	if ("file" in source) {
+		try {
+			if (!(await fs.stat(source.file)).isFile()) return false;
+			extractSubjectToken(await fs.readFile(source.file, "utf8"), source.format, `file ${source.file}`);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	return true;
+}
+
 /** Test seam: the ADC credentials file path as resolved from trusted env. */
 export function resolveAdcCredentialsPathForTest(): string | undefined {
 	return $credentialEnv("GOOGLE_APPLICATION_CREDENTIALS");
@@ -146,15 +234,25 @@ async function loadAdcCredentials(): Promise<{ source: string; creds: AdcFileCre
 	// `stream.ts` already resolves the same variable through `$credentialEnv`.
 	const gacPath = $credentialEnv("GOOGLE_APPLICATION_CREDENTIALS");
 	if (gacPath) {
-		const creds = await readJsonFile<AdcFileCredentials>(gacPath);
+		const value = await readJsonFile<unknown>(gacPath);
+		const creds = isSupportedAdcFileCredentials(value) ? value : undefined;
 		if (!creds) {
-			throw new Error(`GOOGLE_APPLICATION_CREDENTIALS points to a missing file: ${gacPath}`);
+			if (
+				isRecord(value) &&
+				typeof value.type === "string" &&
+				value.type !== "service_account" &&
+				value.type !== "authorized_user" &&
+				value.type !== "external_account"
+			) {
+				throw new Error(`Unsupported Google credential type "${value.type}"`);
+			}
+			throw new Error(`GOOGLE_APPLICATION_CREDENTIALS does not contain supported credentials: ${gacPath}`);
 		}
 		return { source: `gac:${gacPath}`, creds };
 	}
 	const userPath = userAdcPath();
-	const creds = await readJsonFile<AdcFileCredentials>(userPath);
-	if (creds) return { source: `user:${userPath}`, creds };
+	const value = await readJsonFile<unknown>(userPath);
+	if (isSupportedAdcFileCredentials(value)) return { source: `user:${userPath}`, creds: value };
 	return undefined;
 }
 
@@ -244,6 +342,69 @@ async function fetchMetadataToken(
 	}
 }
 
+async function hasMetadataServer(fetchImpl: FetchImpl): Promise<boolean> {
+	const timeout = AbortSignal.timeout(1000);
+	try {
+		const projectResponse = await fetchImpl(METADATA_PROJECT_ID_URL, {
+			method: "GET",
+			headers: { "Metadata-Flavor": "Google" },
+			redirect: "error",
+			signal: timeout,
+		});
+		if (
+			!projectResponse.ok ||
+			projectResponse.headers.get("Metadata-Flavor")?.toLowerCase() !== "google" ||
+			!(await projectResponse.text()).trim()
+		) {
+			return false;
+		}
+		const identityResponse = await fetchImpl(METADATA_SERVICE_ACCOUNT_EMAIL_URL, {
+			method: "GET",
+			headers: { "Metadata-Flavor": "Google" },
+			redirect: "error",
+			signal: timeout,
+		});
+		return (
+			identityResponse.ok &&
+			identityResponse.headers.get("Metadata-Flavor")?.toLowerCase() === "google" &&
+			Boolean((await identityResponse.text()).trim())
+		);
+	} catch {
+		return false;
+	}
+}
+
+function classifyCredentialSource(source: string): VertexCredentialSource | undefined {
+	if (source === "metadata") return "metadata-server";
+	if (source.startsWith("gac:")) return "explicit-file";
+	if (source.startsWith("user:")) return "default-file";
+	return undefined;
+}
+
+/** Resolve the source of a currently usable ADC credential without acquiring an access token. */
+export async function getVertexCredentialSource(options?: {
+	fetch?: FetchImpl;
+}): Promise<VertexCredentialSource | undefined> {
+	const now = Date.now();
+	const skew = getRefreshSkewMs();
+	for (const [source, cached] of tokenCache) {
+		if (cached.expiresAtMs - skew > now) return classifyCredentialSource(source);
+	}
+
+	let adc: { source: string; creds: AdcFileCredentials } | undefined;
+	try {
+		adc = await loadAdcCredentials();
+	} catch {
+		return undefined;
+	}
+	if (adc) {
+		return (await isAvailableAdcFileCredentialSource(adc.creds)) ? classifyCredentialSource(adc.source) : undefined;
+	}
+
+	const fetchImpl = options?.fetch ?? globalThis.fetch.bind(globalThis);
+	return (await hasMetadataServer(fetchImpl)) ? "metadata-server" : undefined;
+}
+
 async function postForToken(
 	url: string,
 	body: URLSearchParams,

package/src/providers/google-gemini-headers.d.ts

@@ -29,15 +29,20 @@ export declare const ANTIGRAVITY_SYSTEM_INSTRUCTION = "You are Antigravity, a po
 /**
  * Antigravity / Cloud Code Assist user agent.
  *
- * Disassembly-confirmed: getUserAgentName() @ 0x5ecb1dd loads "antigravity-ide"
- * via LEA RDX, [RIP-0x284fc90] → 0x367b554 = "antigravity-ide"
+ * Field-evidence-based default: A/B/A test on Windows+Ultra (subscriber) confirmed that
+ * 'antigravity/cli/1.3.4 (os_type=darwin; arch=arm64; aidev_client; auth_method=oauth)'
+ * unlocks Gemini 4 Argon (low/medium/high) and Gemini 3.8 Flash (low/medium/high) models,
+ * plus Opus 5.5. Reverting to 'antigravity-ide' hides Argon models again. Pro accounts
+ * receive 'gemini-4-argon-disabled' with disabled:true, confirming the UA gates model
+ * visibility by account tier. The darwin/arm64 values were tested on Windows and worked,
+ * suggesting this is not platform-specific but rather a client identity string.
  *
- * The LS sets HTTP headers via: fmt.Sprintf("User-Agent: %s", getUserAgentName())
- * So the final header is: User-Agent: antigravity-ide
+ * Historical note: Disassembly (0x5ecb1dd) showed the IDE binary loads 'antigravity-ide';
+ * this appears to be outdated or a fallback for older clients.
  *
- * -override_user_agent flag can override this (confirmed at 0x5ecbc37).
+ * Overridable via PI_AI_ANTIGRAVITY_USER_AGENT environment variable.
  */
-export declare let getAntigravityUserAgent: () => string;
+export declare function getAntigravityUserAgent(): string;
 export declare const getAntigravityRequestHeaders: () => {
     "User-Agent": string;
 };

package/src/providers/google-gemini-headers.ts

@@ -80,20 +80,25 @@ This means you do **NOT** need to poll in a loop while waiting for messages or u
 /**
  * Antigravity / Cloud Code Assist user agent.
  *
- * Disassembly-confirmed: getUserAgentName() @ 0x5ecb1dd loads "antigravity-ide"
- * via LEA RDX, [RIP-0x284fc90] → 0x367b554 = "antigravity-ide"
+ * Field-evidence-based default: A/B/A test on Windows+Ultra (subscriber) confirmed that
+ * 'antigravity/cli/1.3.4 (os_type=darwin; arch=arm64; aidev_client; auth_method=oauth)'
+ * unlocks Gemini 4 Argon (low/medium/high) and Gemini 3.8 Flash (low/medium/high) models,
+ * plus Opus 5.5. Reverting to 'antigravity-ide' hides Argon models again. Pro accounts
+ * receive 'gemini-4-argon-disabled' with disabled:true, confirming the UA gates model
+ * visibility by account tier. The darwin/arm64 values were tested on Windows and worked,
+ * suggesting this is not platform-specific but rather a client identity string.
  *
- * The LS sets HTTP headers via: fmt.Sprintf("User-Agent: %s", getUserAgentName())
- * So the final header is: User-Agent: antigravity-ide
+ * Historical note: Disassembly (0x5ecb1dd) showed the IDE binary loads 'antigravity-ide';
+ * this appears to be outdated or a fallback for older clients.
  *
- * -override_user_agent flag can override this (confirmed at 0x5ecbc37).
+ * Overridable via PI_AI_ANTIGRAVITY_USER_AGENT environment variable.
  */
-export let getAntigravityUserAgent = () => {
-	const override = process.env.PI_AI_ANTIGRAVITY_USER_AGENT;
-	const userAgent = override || "antigravity-ide";
-	getAntigravityUserAgent = () => userAgent;
-	return userAgent;
-};
+export function getAntigravityUserAgent(): string {
+	return (
+		process.env.PI_AI_ANTIGRAVITY_USER_AGENT ||
+		"antigravity/cli/1.3.4 (os_type=darwin; arch=arm64; aidev_client; auth_method=oauth)"
+	);
+}
 
 export const getAntigravityRequestHeaders = () => ({
 	"User-Agent": getAntigravityUserAgent(),

package/src/providers/google-vertex.ts

@@ -1,7 +1,7 @@
 import { $credentialEnv, $pickCredentialEnv } from "@gajae-code/utils";
 import type { Context, Model, StreamFunction } from "../types";
 import type { AssistantMessageEventStream } from "../utils/event-stream";
-import { getVertexAccessToken } from "./google-auth";
+import { getVertexAccessToken, isValidVertexLocation } from "./google-auth";
 import {
 	buildGoogleGenerateContentParams,
 	type GoogleGenAIRequestPlan,
@@ -99,10 +99,8 @@ function resolveEndpointHost(location: string): string {
  * Both halves are needed: trusted resolution keeps a repository from setting it,
  * and the shape check keeps any source from turning a region into an authority.
  */
-const VERTEX_LOCATION_RE = /^[a-z0-9-]+$/;
-
 function assertVertexLocation(location: string): string {
-	if (!VERTEX_LOCATION_RE.test(location)) {
+	if (!isValidVertexLocation(location)) {
 		throw new Error(
 			`Invalid Vertex AI location ${JSON.stringify(location)}. Expected a region label such as "us-central1" or "global".`,
 		);

package/src/providers/kiro-api-key.d.ts

@@ -38,6 +38,11 @@ type KiroStreamEvent = {
         inputTokens?: number;
         outputTokens?: number;
     };
+} | {
+    type: "completion";
+    data: {
+        stopReason: "COMPLETED" | "TOOL_USE";
+    };
 } | {
     type: "refusal";
     data: {