@gajae-code/coding-agent 0.7.1 → 0.7.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. package/CHANGELOG.md +57 -0
  2. package/dist/types/cli/mcp-cli.d.ts +25 -0
  3. package/dist/types/cli/notify-cli.d.ts +2 -0
  4. package/dist/types/cli.d.ts +6 -0
  5. package/dist/types/commands/mcp.d.ts +70 -0
  6. package/dist/types/config/keybindings.d.ts +2 -2
  7. package/dist/types/config/settings-schema.d.ts +39 -2
  8. package/dist/types/deep-interview/plaintext-gate-guard.d.ts +11 -0
  9. package/dist/types/extensibility/shared-events.d.ts +1 -0
  10. package/dist/types/gjc-runtime/ralplan-runtime.d.ts +1 -1
  11. package/dist/types/lsp/types.d.ts +2 -0
  12. package/dist/types/modes/components/custom-editor.d.ts +1 -1
  13. package/dist/types/modes/components/model-selector.d.ts +2 -0
  14. package/dist/types/modes/components/status-line/git-utils.d.ts +6 -0
  15. package/dist/types/modes/theme/defaults/index.d.ts +99 -0
  16. package/dist/types/notifications/attachment-registry.d.ts +17 -0
  17. package/dist/types/notifications/chat-adapters.d.ts +9 -0
  18. package/dist/types/notifications/config.d.ts +9 -1
  19. package/dist/types/notifications/engine.d.ts +59 -0
  20. package/dist/types/notifications/managed-daemon.d.ts +48 -0
  21. package/dist/types/notifications/operator-runtime.d.ts +52 -0
  22. package/dist/types/notifications/telegram-daemon.d.ts +73 -16
  23. package/dist/types/notifications/threaded-inbound.d.ts +19 -0
  24. package/dist/types/notifications/threaded-render.d.ts +6 -1
  25. package/dist/types/notifications/topic-registry.d.ts +2 -0
  26. package/dist/types/session/agent-session.d.ts +2 -0
  27. package/dist/types/tools/composer-bash-policy.d.ts +14 -0
  28. package/dist/types/tools/fetch.d.ts +23 -0
  29. package/dist/types/tools/index.d.ts +1 -0
  30. package/dist/types/tools/telegram-send.d.ts +32 -0
  31. package/dist/types/web/insane/bridge.d.ts +103 -0
  32. package/dist/types/web/insane/url-guard.d.ts +25 -0
  33. package/dist/types/web/scrapers/types.d.ts +5 -0
  34. package/dist/types/web/scrapers/utils.d.ts +7 -1
  35. package/dist/types/web/search/provider.d.ts +18 -1
  36. package/dist/types/web/search/providers/insane.d.ts +53 -0
  37. package/dist/types/web/search/providers/text-citations.d.ts +23 -0
  38. package/dist/types/web/search/types.d.ts +12 -4
  39. package/package.json +10 -8
  40. package/scripts/verify-insane-vendor.ts +132 -0
  41. package/src/cli/args.ts +1 -1
  42. package/src/cli/fast-help.ts +1 -1
  43. package/src/cli/mcp-cli.ts +272 -0
  44. package/src/cli/notify-cli.ts +152 -5
  45. package/src/cli.ts +6 -2
  46. package/src/commands/mcp.ts +117 -0
  47. package/src/commands/team.ts +1 -1
  48. package/src/config/keybindings.ts +2 -2
  49. package/src/config/settings-schema.ts +30 -1
  50. package/src/deep-interview/plaintext-gate-guard.ts +94 -0
  51. package/src/defaults/gjc/skills/deep-interview/SKILL.md +4 -3
  52. package/src/defaults/gjc/skills/ralplan/SKILL.md +11 -4
  53. package/src/defaults/gjc/skills/team/SKILL.md +3 -2
  54. package/src/extensibility/extensions/runner.ts +1 -0
  55. package/src/extensibility/shared-events.ts +1 -0
  56. package/src/gjc-runtime/launch-tmux.ts +17 -3
  57. package/src/gjc-runtime/ledger-event-renderer.ts +1 -0
  58. package/src/gjc-runtime/ralplan-runtime.ts +2 -2
  59. package/src/gjc-runtime/tmux-common.ts +3 -1
  60. package/src/gjc-runtime/ultragoal-guard.ts +25 -8
  61. package/src/gjc-runtime/workflow-manifest.generated.json +29 -0
  62. package/src/gjc-runtime/workflow-manifest.ts +7 -2
  63. package/src/hooks/skill-state.ts +57 -0
  64. package/src/internal-urls/docs-index.generated.ts +14 -11
  65. package/src/lsp/config.ts +16 -3
  66. package/src/lsp/defaults.json +7 -0
  67. package/src/lsp/types.ts +2 -0
  68. package/src/modes/bridge/bridge-mode.ts +11 -0
  69. package/src/modes/components/custom-editor.ts +2 -0
  70. package/src/modes/components/footer.ts +2 -3
  71. package/src/modes/components/model-selector.ts +12 -0
  72. package/src/modes/components/status-line/git-utils.ts +25 -0
  73. package/src/modes/components/status-line.ts +10 -11
  74. package/src/modes/components/welcome.ts +2 -3
  75. package/src/modes/controllers/event-controller.ts +15 -0
  76. package/src/modes/controllers/selector-controller.ts +3 -0
  77. package/src/modes/interactive-mode.ts +48 -3
  78. package/src/modes/shared/agent-wire/scopes.ts +1 -1
  79. package/src/modes/theme/defaults/gruvbox-dark.json +99 -0
  80. package/src/modes/theme/defaults/index.ts +2 -0
  81. package/src/modes/utils/context-usage.ts +2 -2
  82. package/src/notifications/attachment-registry.ts +23 -0
  83. package/src/notifications/chat-adapters.ts +147 -0
  84. package/src/notifications/config.ts +23 -2
  85. package/src/notifications/engine.ts +100 -0
  86. package/src/notifications/index.ts +180 -38
  87. package/src/notifications/managed-daemon.ts +163 -0
  88. package/src/notifications/operator-runtime.ts +171 -0
  89. package/src/notifications/telegram-daemon.ts +553 -236
  90. package/src/notifications/threaded-inbound.ts +60 -4
  91. package/src/notifications/threaded-render.ts +20 -2
  92. package/src/notifications/topic-registry.ts +5 -0
  93. package/src/session/agent-session.ts +82 -51
  94. package/src/slash-commands/helpers/parse.ts +2 -1
  95. package/src/tools/bash.ts +9 -0
  96. package/src/tools/composer-bash-policy.ts +96 -0
  97. package/src/tools/fetch.ts +94 -1
  98. package/src/tools/index.ts +3 -0
  99. package/src/tools/telegram-send.ts +137 -0
  100. package/src/web/insane/bridge.ts +350 -0
  101. package/src/web/insane/url-guard.ts +159 -0
  102. package/src/web/scrapers/types.ts +143 -45
  103. package/src/web/scrapers/utils.ts +70 -19
  104. package/src/web/search/provider.ts +77 -18
  105. package/src/web/search/providers/anthropic.ts +70 -3
  106. package/src/web/search/providers/codex.ts +1 -119
  107. package/src/web/search/providers/gemini.ts +99 -0
  108. package/src/web/search/providers/insane.ts +551 -0
  109. package/src/web/search/providers/openai-compatible.ts +66 -32
  110. package/src/web/search/providers/text-citations.ts +111 -0
  111. package/src/web/search/types.ts +13 -2
  112. package/vendor/insane-search/LICENSE +21 -0
  113. package/vendor/insane-search/MANIFEST.json +24 -0
  114. package/vendor/insane-search/engine/__init__.py +23 -0
  115. package/vendor/insane-search/engine/__main__.py +128 -0
  116. package/vendor/insane-search/engine/bias_check.py +183 -0
  117. package/vendor/insane-search/engine/executor.py +254 -0
  118. package/vendor/insane-search/engine/fetch_chain.py +725 -0
  119. package/vendor/insane-search/engine/learning.py +175 -0
  120. package/vendor/insane-search/engine/phase0.py +214 -0
  121. package/vendor/insane-search/engine/safety.py +91 -0
  122. package/vendor/insane-search/engine/templates/package.json +11 -0
  123. package/vendor/insane-search/engine/templates/playwright_mobile_chrome.js +188 -0
  124. package/vendor/insane-search/engine/templates/playwright_real_chrome.js +243 -0
  125. package/vendor/insane-search/engine/tests/test_hardening.py +57 -0
  126. package/vendor/insane-search/engine/tests/test_smoke.py +152 -0
  127. package/vendor/insane-search/engine/tests/test_u1.py +200 -0
  128. package/vendor/insane-search/engine/tests/test_u4.py +131 -0
  129. package/vendor/insane-search/engine/tests/test_u5.py +163 -0
  130. package/vendor/insane-search/engine/tests/test_u7.py +124 -0
  131. package/vendor/insane-search/engine/transport.py +211 -0
  132. package/vendor/insane-search/engine/url_transforms.py +98 -0
  133. package/vendor/insane-search/engine/validators.py +331 -0
  134. package/vendor/insane-search/engine/waf_detector.py +214 -0
  135. package/vendor/insane-search/engine/waf_profiles.yaml +162 -0
@@ -25,6 +25,7 @@ import type {
25
25
  import { SearchProviderError } from "../../../web/search/types";
26
26
  import type { SearchParams } from "./base";
27
27
  import { SearchProvider } from "./base";
28
+ import { extractTextSources } from "./text-citations";
28
29
  import { classifyProviderHttpError, withHardTimeout } from "./utils";
29
30
 
30
31
  const DEFAULT_MODEL = "claude-haiku-4-5";
@@ -87,9 +88,10 @@ async function callSearch(
87
88
  maxTokens?: number,
88
89
  temperature?: number,
89
90
  signal?: AbortSignal,
91
+ extraHeaders?: Record<string, string>,
90
92
  ): Promise<AnthropicApiResponse> {
91
93
  const url = buildAnthropicUrl(auth);
92
- const headers = buildAnthropicSearchHeaders(auth);
94
+ const headers = { ...(extraHeaders ?? {}), ...buildAnthropicSearchHeaders(auth) };
93
95
 
94
96
  const systemBlocks = buildSystemBlocks(auth, model, systemPrompt);
95
97
 
@@ -191,7 +193,7 @@ function parseResponse(response: AnthropicApiResponse): SearchResponse {
191
193
  if (block.input?.query) {
192
194
  searchQueries.push(block.input.query);
193
195
  }
194
- } else if (block.type === "web_search_tool_result" && block.content) {
196
+ } else if (block.type === "web_search_tool_result" && Array.isArray(block.content)) {
195
197
  // Search results
196
198
  for (const result of block.content) {
197
199
  if (result.type === "web_search_result") {
@@ -235,6 +237,34 @@ function parseResponse(response: AnthropicApiResponse): SearchResponse {
235
237
  };
236
238
  }
237
239
 
240
+ /**
241
+ * Whether the response carries proof that a web search actually ran: a
242
+ * `web_search_tool_result` block, a `web_search` server tool call, or a
243
+ * non-zero `server_tool_use.web_search_requests` usage counter.
244
+ */
245
+ function anthropicSearchPerformed(response: AnthropicApiResponse): boolean {
246
+ if (response.usage?.server_tool_use?.web_search_requests) return true;
247
+ for (const block of response.content ?? []) {
248
+ if (block.type === "web_search_tool_result") {
249
+ // `content` is an array of results on success but an error OBJECT
250
+ // (`web_search_tool_result_error`) on failure; only count a result
251
+ // array with at least one real result as proof of search.
252
+ if (Array.isArray(block.content) && block.content.some(result => result.type === "web_search_result")) {
253
+ return true;
254
+ }
255
+ continue;
256
+ }
257
+ if (
258
+ block.type === "server_tool_use" &&
259
+ block.name &&
260
+ stripClaudeToolPrefix(block.name) === WEB_SEARCH_TOOL_NAME
261
+ ) {
262
+ return true;
263
+ }
264
+ }
265
+ return false;
266
+ }
267
+
238
268
  /**
239
269
  * Executes a web search using Anthropic's Anthropic model with built-in web search tool.
240
270
  * @param params - Search parameters including query and optional settings
@@ -248,6 +278,10 @@ export async function searchAnthropic(
248
278
  const searchApiKey = $env.ANTHROPIC_SEARCH_API_KEY;
249
279
  const searchBaseUrl = $env.ANTHROPIC_SEARCH_BASE_URL;
250
280
  let auth: AnthropicAuthConfig | undefined;
281
+ // When reusing the active model's own credentials (native search over a
282
+ // proxy), prefer its wire model id and carry its request headers through.
283
+ let modelOverride: string | undefined;
284
+ let extraHeaders: Record<string, string> | undefined;
251
285
 
252
286
  if (searchApiKey) {
253
287
  auth = buildAnthropicAuthConfig(searchApiKey, searchBaseUrl);
@@ -256,6 +290,23 @@ export async function searchAnthropic(
256
290
  signal: params.signal,
257
291
  });
258
292
  if (apiKey) auth = buildAnthropicAuthConfig(apiKey);
293
+
294
+ // Fall back to the active model's own credentials + baseUrl when no
295
+ // canonical Anthropic key exists but the active model speaks the
296
+ // Anthropic wire (e.g. Claude served through a proxy).
297
+ const ctx = params.activeModelContext;
298
+ if (!auth && ctx && ctx.api === "anthropic-messages") {
299
+ const ctxKey = await params.authStorage.getApiKey(ctx.provider, params.sessionId, {
300
+ baseUrl: ctx.baseUrl,
301
+ modelId: ctx.modelId,
302
+ signal: params.signal,
303
+ });
304
+ if (ctxKey) {
305
+ auth = buildAnthropicAuthConfig(ctxKey, ctx.baseUrl);
306
+ modelOverride = ctx.wireModelId ?? ctx.modelId;
307
+ extraHeaders = ctx.headers;
308
+ }
309
+ }
259
310
  }
260
311
 
261
312
  if (!auth) {
@@ -264,7 +315,7 @@ export async function searchAnthropic(
264
315
  );
265
316
  }
266
317
 
267
- const model = getModel();
318
+ const model = modelOverride ?? getModel();
268
319
  const systemPrompt = "authStorage" in params ? params.systemPrompt : params.system_prompt;
269
320
  const maxTokens = "authStorage" in params ? params.maxOutputTokens : params.max_tokens;
270
321
  const response = await callSearch(
@@ -275,9 +326,25 @@ export async function searchAnthropic(
275
326
  maxTokens,
276
327
  params.temperature,
277
328
  params.signal,
329
+ extraHeaders,
278
330
  );
279
331
 
280
332
  const result = parseResponse(response);
333
+ const searched = anthropicSearchPerformed(response);
334
+
335
+ // When a search ran but the model wrote its citations inline instead of as
336
+ // structured `web_search_result_location` blocks, recover sources from the
337
+ // answer text so a genuinely grounded result is not discarded.
338
+ if (result.sources.length === 0 && searched && result.answer) {
339
+ const inline = extractTextSources(result.answer);
340
+ if (inline.length > 0) result.sources = inline;
341
+ }
342
+
343
+ // Fail closed so the chain falls through to DuckDuckGo when Claude answered
344
+ // from stable knowledge without running a web search.
345
+ if (result.sources.length === 0 && !(result.citations && result.citations.length > 0) && !searched) {
346
+ throw new SearchProviderError("anthropic", "Anthropic web search returned no grounded sources", 424);
347
+ }
281
348
 
282
349
  const numResults = "authStorage" in params ? (params.numSearchResults ?? params.limit) : params.num_results;
283
350
  if (numResults && result.sources.length > numResults) {
@@ -15,6 +15,7 @@ import type { SearchResponse, SearchSource } from "../../../web/search/types";
15
15
  import { SearchProviderError } from "../../../web/search/types";
16
16
  import type { SearchParams } from "./base";
17
17
  import { SearchProvider } from "./base";
18
+ import { addSource, extractTextSources } from "./text-citations";
18
19
  import { classifyProviderHttpError, withHardTimeout } from "./utils";
19
20
 
20
21
  const CODEX_BASE_URL = "https://chatgpt.com/backend-api";
@@ -118,125 +119,6 @@ function isImagePlaceholderAnswer(text: string): boolean {
118
119
  return text.trim().toLowerCase() === "(see attached image)";
119
120
  }
120
121
 
121
- function addSource(sources: SearchSource[], source: SearchSource): void {
122
- if (!sources.some(existing => existing.url === source.url)) {
123
- sources.push(source);
124
- }
125
- }
126
-
127
- function countCharacter(text: string, target: string): number {
128
- let count = 0;
129
- for (const char of text) {
130
- if (char === target) {
131
- count += 1;
132
- }
133
- }
134
- return count;
135
- }
136
-
137
- /**
138
- * Strips prose punctuation and unmatched closing delimiters from extracted URLs.
139
- * OpenAI code backend often returns links in markdown or sentence text without structured annotations.
140
- */
141
- function normalizeExtractedUrl(candidate: string): string | null {
142
- let url = candidate.trim();
143
-
144
- while (url.length > 0) {
145
- const lastCharacter = url.at(-1);
146
- if (!lastCharacter) break;
147
- if (/[.,!?;:'"]/u.test(lastCharacter)) {
148
- url = url.slice(0, -1);
149
- continue;
150
- }
151
- if (lastCharacter === ")" && countCharacter(url, ")") > countCharacter(url, "(")) {
152
- url = url.slice(0, -1);
153
- continue;
154
- }
155
- if (lastCharacter === "]" && countCharacter(url, "]") > countCharacter(url, "[")) {
156
- url = url.slice(0, -1);
157
- continue;
158
- }
159
- if (lastCharacter === "}" && countCharacter(url, "}") > countCharacter(url, "{")) {
160
- url = url.slice(0, -1);
161
- continue;
162
- }
163
- break;
164
- }
165
-
166
- if (!/^https?:\/\//.test(url)) {
167
- return null;
168
- }
169
-
170
- try {
171
- return new URL(url).toString();
172
- } catch {
173
- return null;
174
- }
175
- }
176
-
177
- function findMarkdownLinkUrlEnd(text: string, openParenIndex: number): number | null {
178
- let depth = 0;
179
-
180
- for (let index = openParenIndex; index < text.length; index += 1) {
181
- const character = text[index];
182
- if (!character || character === "\n") {
183
- return null;
184
- }
185
- if (character === "(") {
186
- depth += 1;
187
- continue;
188
- }
189
- if (character !== ")") {
190
- continue;
191
- }
192
- depth -= 1;
193
- if (depth === 0) {
194
- return index;
195
- }
196
- if (depth < 0) {
197
- return null;
198
- }
199
- }
200
-
201
- return null;
202
- }
203
-
204
- /**
205
- * Extracts citation sources from markdown links and bare URLs in the answer text.
206
- * Used as a fallback when the OpenAI code backend response omits `url_citation` annotations.
207
- */
208
- function extractTextSources(text: string): SearchSource[] {
209
- const sources: SearchSource[] = [];
210
-
211
- for (let index = 0; index < text.length; index += 1) {
212
- if (text[index] !== "[") {
213
- continue;
214
- }
215
- const titleEnd = text.indexOf("]", index + 1);
216
- if (titleEnd === -1 || text[titleEnd + 1] !== "(") {
217
- continue;
218
- }
219
- const urlEnd = findMarkdownLinkUrlEnd(text, titleEnd + 1);
220
- if (urlEnd === null) {
221
- continue;
222
- }
223
- const title = text.slice(index + 1, titleEnd).trim();
224
- const url = normalizeExtractedUrl(text.slice(titleEnd + 2, urlEnd));
225
- if (url) {
226
- addSource(sources, { title: title || url, url });
227
- }
228
- index = urlEnd;
229
- }
230
-
231
- for (const match of text.matchAll(/https?:\/\/\S+/g)) {
232
- const url = normalizeExtractedUrl(match[0] ?? "");
233
- if (!url) continue;
234
- addSource(sources, { title: url, url });
235
- }
236
-
237
- return sources;
238
- }
239
-
240
122
  /**
241
123
  * Extracts account ID from a OpenAI code backend access token.
242
124
  * @param accessToken - JWT access token
@@ -425,6 +425,98 @@ export async function searchGemini(params: GeminiSearchParams): Promise<SearchRe
425
425
  };
426
426
  }
427
427
 
428
+ /**
429
+ * Native Gemini web search over the public Generative Language REST API
430
+ * (`{baseUrl}/v1beta/models/{model}:generateContent`), reusing the ACTIVE
431
+ * model's own API key + baseUrl. This is the "native search over a proxy" path
432
+ * for `google-generative-ai` wire models whose canonical gemini-cli/antigravity
433
+ * OAuth is absent. Distinct from {@link searchGemini}, which speaks the Cloud
434
+ * Code Assist API with OAuth.
435
+ */
436
+ async function searchGeminiViaGenerativeLanguage(params: SearchParams): Promise<SearchResponse> {
437
+ const ctx = params.activeModelContext;
438
+ if (!ctx) throw new SearchProviderError("gemini", "Gemini web search requires active model context", 400);
439
+ const apiKey = await params.authStorage.getApiKey(ctx.provider, params.sessionId, {
440
+ baseUrl: ctx.baseUrl,
441
+ modelId: ctx.modelId,
442
+ signal: params.signal,
443
+ });
444
+ if (!apiKey) throw new SearchProviderError("gemini", `No credentials for ${ctx.provider}`, 401);
445
+
446
+ const model = ctx.wireModelId ?? ctx.modelId;
447
+ const base = (ctx.baseUrl ?? "https://generativelanguage.googleapis.com").replace(/\/+$/, "");
448
+ // Respect an already-versioned active baseUrl (e.g. a proxy exposing `…/v1beta`)
449
+ // instead of double-appending the version segment.
450
+ const versionedBase = /\/v1(beta|alpha)?$/.test(base) ? base : `${base}/v1beta`;
451
+ const url = `${versionedBase}/models/${encodeURIComponent(model)}:generateContent`;
452
+ const systemPrompt = params.systemPrompt?.toWellFormed();
453
+ const body: Record<string, unknown> = {
454
+ contents: [{ role: "user", parts: [{ text: params.query }] }],
455
+ tools: buildGeminiRequestTools({ google_search: params.googleSearch }),
456
+ ...(systemPrompt ? { systemInstruction: { parts: [{ text: systemPrompt }] } } : {}),
457
+ };
458
+ if (params.maxOutputTokens !== undefined || params.temperature !== undefined) {
459
+ const generationConfig: Record<string, number> = {};
460
+ if (params.maxOutputTokens !== undefined) generationConfig.maxOutputTokens = params.maxOutputTokens;
461
+ if (params.temperature !== undefined) generationConfig.temperature = params.temperature;
462
+ body.generationConfig = generationConfig;
463
+ }
464
+
465
+ const response = await fetch(url, {
466
+ method: "POST",
467
+ headers: { ...(ctx.headers ?? {}), "x-goog-api-key": apiKey, "Content-Type": "application/json" },
468
+ body: JSON.stringify(body),
469
+ signal: withHardTimeout(params.signal),
470
+ });
471
+ const text = await response.text();
472
+ if (!response.ok) {
473
+ const classified = classifyProviderHttpError("gemini", response.status, text);
474
+ if (classified) throw classified;
475
+ throw new SearchProviderError("gemini", `Gemini API error (${response.status}): ${text}`, response.status);
476
+ }
477
+
478
+ const json = text ? JSON.parse(text) : {};
479
+ const candidate = json.candidates?.[0];
480
+ const grounding: GeminiGroundingMetadata | undefined = candidate?.groundingMetadata;
481
+ const answer = (candidate?.content?.parts ?? []).map((part: { text?: string }) => part.text ?? "").join("");
482
+
483
+ const sources: SearchSource[] = [];
484
+ const citations: SearchCitation[] = [];
485
+ const searchQueries: string[] = [];
486
+ const seenUrls = new Set<string>();
487
+ const chunks = grounding?.groundingChunks ?? [];
488
+ for (const grChunk of chunks) {
489
+ const uri = grChunk.web?.uri;
490
+ if (uri && !seenUrls.has(uri)) {
491
+ seenUrls.add(uri);
492
+ sources.push({ title: grChunk.web?.title ?? uri, url: uri });
493
+ }
494
+ }
495
+ for (const support of grounding?.groundingSupports ?? []) {
496
+ const citedText = support.segment?.text;
497
+ for (const idx of support.groundingChunkIndices ?? []) {
498
+ const uri = chunks[idx]?.web?.uri;
499
+ if (uri) citations.push({ url: uri, title: chunks[idx]?.web?.title ?? uri, citedText });
500
+ }
501
+ }
502
+ for (const q of grounding?.webSearchQueries ?? []) {
503
+ if (!searchQueries.includes(q)) searchQueries.push(q);
504
+ }
505
+
506
+ if (sources.length === 0) {
507
+ throw new SearchProviderError("gemini", "Gemini native search returned no grounding sources", 424);
508
+ }
509
+ const limit = params.numSearchResults ?? params.limit;
510
+ return {
511
+ provider: "gemini",
512
+ answer: answer || undefined,
513
+ sources: limit && sources.length > limit ? sources.slice(0, limit) : sources,
514
+ citations: citations.length > 0 ? citations : undefined,
515
+ searchQueries: searchQueries.length > 0 ? searchQueries : undefined,
516
+ model: json.modelVersion ?? model,
517
+ };
518
+ }
519
+
428
520
  /** Search provider for Google Gemini web search. */
429
521
  export class GeminiProvider extends SearchProvider {
430
522
  readonly id = "gemini";
@@ -438,6 +530,13 @@ export class GeminiProvider extends SearchProvider {
438
530
  }
439
531
 
440
532
  search(params: SearchParams): Promise<SearchResponse> {
533
+ // Native-over-proxy: when canonical gemini-cli/antigravity OAuth is
534
+ // absent but the active model speaks the Generative Language wire, reuse
535
+ // its own API key + baseUrl instead of failing closed.
536
+ const ctx = params.activeModelContext;
537
+ if (!hasGeminiOAuth(params.authStorage) && ctx?.api === "google-generative-ai") {
538
+ return searchGeminiViaGenerativeLanguage(params);
539
+ }
441
540
  return searchGemini({
442
541
  query: params.query,
443
542
  system_prompt: params.systemPrompt,