@humain/terminal 0.0.6 → 0.0.7

package/dist/humain/web-access/vendor/fetch-params.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-params.js","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/fetch-params.ts"],"names":[],"mappings":"AA2BA,MAAM,UAAU,2BAA2B,CAAC,MAA0B;IACrE,MAAM,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1D,MAAM,mBAAmB,GAAG,MAAM,KAAK,SAAS,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IAE5F,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAExC,OAAO;QACN,OAAO;QACP,OAAO,EAAE;YACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC;KACD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IACjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["export interface FetchContentParams {\n\turl?: unknown;\n\turls?: unknown;\n\tforceClone?: unknown;\n\tprompt?: unknown;\n\ttimestamp?: unknown;\n\tframes?: unknown;\n\tmodel?: unknown;\n\tmode?: unknown;\n\tanswerModel?: unknown;\n\tauth?: unknown;\n}\n\nexport interface NormalizedFetchContentParams {\n\turlList: string[];\n\toptions: {\n\t\tforceClone?: boolean;\n\t\tprompt?: string;\n\t\ttimestamp?: string;\n\t\tframes?: number;\n\t\tmodel?: string;\n\t\tmode?: \"readable\" | \"raw\" | \"answer\";\n\t\tanswerModel?: string;\n\t\tauth?: true | string;\n\t};\n}\n\nexport function normalizeFetchContentParams(params: FetchContentParams): NormalizedFetchContentParams {\n\tconst normalizedUrls = uniqueUrls(normalizeUrlArray(params.urls));\n\tconst urlList = normalizedUrls.length > 0 ? normalizedUrls : normalizeSingleUrl(params.url);\n\tconst prompt = normalizeOptionalString(params.prompt);\n\tconst timestamp = normalizeOptionalString(params.timestamp);\n\tconst frames = normalizeOptionalFrameCount(params.frames);\n\n\tconst shouldIncludeFrames = frames !== undefined && (timestamp !== undefined || frames > 1);\n\n\tconst forceClone = typeof params.forceClone === \"boolean\" ? params.forceClone : undefined;\n\tconst model = normalizeOptionalString(params.model);\n\tconst mode = normalizeMode(params.mode);\n\tconst answerModel = normalizeOptionalString(params.answerModel);\n\tconst auth = normalizeAuth(params.auth);\n\n\treturn {\n\t\turlList,\n\t\toptions: {\n\t\t\t...(forceClone !== undefined ? { forceClone } : {}),\n\t\t\t...(prompt !== undefined ? { prompt } : {}),\n\t\t\t...(timestamp !== undefined ? { timestamp } : {}),\n\t\t\t...(shouldIncludeFrames ? { frames } : {}),\n\t\t\t...(model !== undefined ? { model } : {}),\n\t\t\t...(mode !== undefined ? { mode } : {}),\n\t\t\t...(answerModel !== undefined ? { answerModel } : {}),\n\t\t\t...(auth !== undefined ? { auth } : {}),\n\t\t},\n\t};\n}\n\nfunction normalizeUrlArray(value: unknown): string[] {\n\tif (!Array.isArray(value)) return [];\n\treturn value.flatMap(normalizeSingleUrl);\n}\n\nfunction normalizeSingleUrl(value: unknown): string[] {\n\tif (typeof value !== \"string\") return [];\n\tconst trimmed = value.trim();\n\treturn trimmed ? [trimmed] : [];\n}\n\nfunction normalizeOptionalString(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = value.trim();\n\treturn trimmed || undefined;\n}\n\nfunction normalizeMode(value: unknown): \"readable\" | \"raw\" | \"answer\" | undefined {\n\tif (value === undefined) return undefined;\n\tif (value === \"readable\" || value === \"raw\" || value === \"answer\") return value;\n\tthrow new Error('mode must be \"readable\", \"raw\", or \"answer\"');\n}\n\nfunction normalizeAuth(value: unknown): true | string | undefined {\n\tif (value === undefined || value === false) return undefined;\n\tif (value === true) return true;\n\tif (typeof value === \"string\") {\n\t\tconst trimmed = value.trim();\n\t\tif (trimmed) return trimmed;\n\t}\n\tthrow new Error(\"auth must be a profile name, true, or false\");\n}\n\nfunction normalizeOptionalFrameCount(value: unknown): number | undefined {\n\tif (typeof value !== \"number\" || !Number.isInteger(value) || value < 1 || value > 12) return undefined;\n\treturn value;\n}\n\nfunction uniqueUrls(urls: string[]): string[] {\n\treturn [...new Set(urls)];\n}\n"]}
+{"version":3,"file":"fetch-params.js","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/fetch-params.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA+B/C,MAAM,UAAU,2BAA2B,CAAC,MAA0B;IACrE,MAAM,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1D,MAAM,mBAAmB,GAAG,MAAM,KAAK,SAAS,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IAE5F,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3C,OAAO;QACN,OAAO;QACP,OAAO,EAAE;YACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC;KACD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,UAAU,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IACjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import { normalizeProxyUrl } from \"./utils.ts\";\n\nexport interface FetchContentParams {\n\turl?: unknown;\n\turls?: unknown;\n\tforceClone?: unknown;\n\tprompt?: unknown;\n\ttimestamp?: unknown;\n\tframes?: unknown;\n\tmodel?: unknown;\n\tmode?: unknown;\n\tanswerModel?: unknown;\n\tauth?: unknown;\n\tproxy?: unknown;\n}\n\nexport interface NormalizedFetchContentParams {\n\turlList: string[];\n\toptions: {\n\t\tforceClone?: boolean;\n\t\tprompt?: string;\n\t\ttimestamp?: string;\n\t\tframes?: number;\n\t\tmodel?: string;\n\t\tmode?: \"readable\" | \"raw\" | \"answer\";\n\t\tanswerModel?: string;\n\t\tauth?: true | string;\n\t\tproxy?: string;\n\t};\n}\n\nexport function normalizeFetchContentParams(params: FetchContentParams): NormalizedFetchContentParams {\n\tconst normalizedUrls = uniqueUrls(normalizeUrlArray(params.urls));\n\tconst urlList = normalizedUrls.length > 0 ? normalizedUrls : normalizeSingleUrl(params.url);\n\tconst prompt = normalizeOptionalString(params.prompt);\n\tconst timestamp = normalizeOptionalString(params.timestamp);\n\tconst frames = normalizeOptionalFrameCount(params.frames);\n\n\tconst shouldIncludeFrames = frames !== undefined && (timestamp !== undefined || frames > 1);\n\n\tconst forceClone = typeof params.forceClone === \"boolean\" ? params.forceClone : undefined;\n\tconst model = normalizeOptionalString(params.model);\n\tconst mode = normalizeMode(params.mode);\n\tconst answerModel = normalizeOptionalString(params.answerModel);\n\tconst auth = normalizeAuth(params.auth);\n\tconst proxy = normalizeProxy(params.proxy);\n\n\treturn {\n\t\turlList,\n\t\toptions: {\n\t\t\t...(forceClone !== undefined ? { forceClone } : {}),\n\t\t\t...(prompt !== undefined ? { prompt } : {}),\n\t\t\t...(timestamp !== undefined ? { timestamp } : {}),\n\t\t\t...(shouldIncludeFrames ? { frames } : {}),\n\t\t\t...(model !== undefined ? { model } : {}),\n\t\t\t...(mode !== undefined ? { mode } : {}),\n\t\t\t...(answerModel !== undefined ? { answerModel } : {}),\n\t\t\t...(auth !== undefined ? { auth } : {}),\n\t\t\t...(proxy !== undefined ? { proxy } : {}),\n\t\t},\n\t};\n}\n\nfunction normalizeUrlArray(value: unknown): string[] {\n\tif (!Array.isArray(value)) return [];\n\treturn value.flatMap(normalizeSingleUrl);\n}\n\nfunction normalizeSingleUrl(value: unknown): string[] {\n\tif (typeof value !== \"string\") return [];\n\tconst trimmed = value.trim();\n\treturn trimmed ? [trimmed] : [];\n}\n\nfunction normalizeOptionalString(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = value.trim();\n\treturn trimmed || undefined;\n}\n\nfunction normalizeMode(value: unknown): \"readable\" | \"raw\" | \"answer\" | undefined {\n\tif (value === undefined) return undefined;\n\tif (value === \"readable\" || value === \"raw\" || value === \"answer\") return value;\n\tthrow new Error('mode must be \"readable\", \"raw\", or \"answer\"');\n}\n\nfunction normalizeAuth(value: unknown): true | string | undefined {\n\tif (value === undefined || value === false) return undefined;\n\tif (value === true) return true;\n\tif (typeof value === \"string\") {\n\t\tconst trimmed = value.trim();\n\t\tif (trimmed) return trimmed;\n\t}\n\tthrow new Error(\"auth must be a profile name, true, or false\");\n}\n\nfunction normalizeProxy(value: unknown): string | undefined {\n\tif (value === undefined || value === false) return undefined;\n\tif (value === null) throw new Error(\"proxy must be an http(s) proxy URL string\");\n\tconst normalized = normalizeProxyUrl(value, \"proxy\");\n\treturn normalized ?? \"\";\n}\n\nfunction normalizeOptionalFrameCount(value: unknown): number | undefined {\n\tif (typeof value !== \"number\" || !Number.isInteger(value) || value < 1 || value > 12) return undefined;\n\treturn value;\n}\n\nfunction uniqueUrls(urls: string[]): string[] {\n\treturn [...new Set(urls)];\n}\n"]}

package/dist/humain/web-access/vendor/gemini-adc.d.ts

@@ -0,0 +1,10 @@
+export declare function isAdcAuthSelected(): boolean;
+export declare function getAdcProject(): string | null;
+export declare function getAdcLocation(): string | null;
+export declare function getVertexApiBase(project: string, location: string): string;
+export declare function isVertexHost(origin: string): boolean;
+export declare function clearAdcTokenCache(): void;
+export declare function getAdcAccessToken(signal?: AbortSignal): Promise<string>;
+export declare function isGeminiAdcAvailable(): boolean;
+export declare function redactAdcToken(text: string): string;
+//# sourceMappingURL=gemini-adc.d.ts.map

package/dist/humain/web-access/vendor/gemini-adc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-adc.d.ts","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/gemini-adc.ts"],"names":[],"mappings":"AAqDA,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAK7C;AAED,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AAMD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpD;AA+FD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAsFD,wBAAsB,iBAAiB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAc7E;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAU9C;AAgBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/humain/web-access/vendor/gemini-adc.js

@@ -0,0 +1,268 @@
+import { existsSync, readFileSync } from "node:fs";
+import { createSign } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { getWebSearchConfigPath } from "./utils.js";
+import { redactCredential, CredentialResolutionError } from "./credential-source.js";
+const CONFIG_PATH = getWebSearchConfigPath();
+const DEFAULT_ADC_PATH = join(homedir(), ".config", "gcloud", "application_default_credentials.json");
+const TOKEN_ENDPOINT = "https://oauth2.googleapis.com/token";
+const VERTEX_HOST = "https://aiplatform.googleapis.com";
+const VERTEX_API_VERSION = "v1";
+const REFRESH_SKEW_MS = 60_000;
+let cachedConfig = null;
+function loadConfig() {
+    if (cachedConfig)
+        return cachedConfig;
+    if (!existsSync(CONFIG_PATH)) {
+        cachedConfig = {};
+        return cachedConfig;
+    }
+    const raw = readFileSync(CONFIG_PATH, "utf-8");
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new Error("config root must be an object");
+        }
+        cachedConfig = parsed;
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to parse ${CONFIG_PATH}: ${message}`);
+    }
+    return cachedConfig;
+}
+function normalizeIdentifier(value, envName) {
+    if (typeof value === "string") {
+        const trimmed = value.trim();
+        if (trimmed)
+            return trimmed;
+    }
+    const fromEnv = process.env[envName]?.trim();
+    return fromEnv ? fromEnv : null;
+}
+export function isAdcAuthSelected() {
+    return (loadConfig().geminiAuth ?? "").toString().trim().toLowerCase() === "adc";
+}
+export function getAdcProject() {
+    return (normalizeIdentifier(loadConfig().geminiProject, "GOOGLE_CLOUD_PROJECT") ??
+        normalizeIdentifier(null, "GCLOUD_PROJECT"));
+}
+export function getAdcLocation() {
+    return normalizeIdentifier(loadConfig().geminiLocation, "GOOGLE_CLOUD_LOCATION");
+}
+function getAdcPath() {
+    return process.env.GOOGLE_APPLICATION_CREDENTIALS?.trim() || DEFAULT_ADC_PATH;
+}
+export function getVertexApiBase(project, location) {
+    return `${VERTEX_HOST}/${VERTEX_API_VERSION}/projects/${encodeURIComponent(project)}/locations/${encodeURIComponent(location)}/publishers/google`;
+}
+export function isVertexHost(origin) {
+    return origin === VERTEX_HOST;
+}
+function objectRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function stringField(record, name) {
+    const value = record[name];
+    return typeof value === "string" ? value : undefined;
+}
+function requiredString(record, name, context) {
+    const value = stringField(record, name)?.trim();
+    if (!value)
+        throw new Error(`${context} is missing ${name}`);
+    return value;
+}
+function parseAdcFile(raw) {
+    const parsed = objectRecord(JSON.parse(raw));
+    if (!parsed)
+        throw new Error("credential root must be an object");
+    const type = stringField(parsed, "type") ?? "authorized_user";
+    if (type === "authorized_user") {
+        return {
+            type,
+            client_id: requiredString(parsed, "client_id", "Gemini ADC authorized_user file"),
+            client_secret: requiredString(parsed, "client_secret", "Gemini ADC authorized_user file"),
+            refresh_token: requiredString(parsed, "refresh_token", "Gemini ADC authorized_user file"),
+            universe_domain: stringField(parsed, "universe_domain"),
+        };
+    }
+    if (type === "service_account") {
+        return {
+            type,
+            client_email: requiredString(parsed, "client_email", "Gemini ADC service_account file"),
+            private_key: requiredString(parsed, "private_key", "Gemini ADC service_account file"),
+            private_key_id: stringField(parsed, "private_key_id"),
+            token_uri: stringField(parsed, "token_uri"),
+            universe_domain: stringField(parsed, "universe_domain"),
+        };
+    }
+    return { type };
+}
+function parseTokenExchangeResponse(text, context) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`${context} returned invalid JSON: ${message}`);
+    }
+    const parsed = objectRecord(raw);
+    if (!parsed)
+        throw new Error(`${context} returned a non-object response`);
+    const token = stringField(parsed, "access_token")?.trim();
+    if (!token)
+        throw new Error(`${context} returned no access_token`);
+    const expiresIn = parsed.expires_in ?? 3600;
+    if (typeof expiresIn !== "number" || !Number.isFinite(expiresIn)) {
+        throw new Error(`${context} returned invalid expires_in`);
+    }
+    return { token, expiresAt: Date.now() + Math.max((expiresIn * 1000) - REFRESH_SKEW_MS, 60_000) };
+}
+async function loadAdcFile() {
+    const path = getAdcPath();
+    if (!path || !existsSync(path)) {
+        throw new Error(`Google Application Default Credentials file not found at ${path}`);
+    }
+    const raw = readFileSync(path, "utf-8");
+    try {
+        return parseAdcFile(raw);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to parse Google Application Default Credentials file at ${path}: ${message}`);
+    }
+}
+let cachedToken = null;
+export function clearAdcTokenCache() {
+    cachedToken = null;
+}
+/**
+ * Classifies a failed OAuth token exchange. Only explicit credential/authorization
+ * rejections (400 invalid_client/invalid_grant/invalid_scope, 401, 403 denied)
+ * mean the configured credentials themselves were refused — a hard credential
+ * problem callers should surface rather than silently fall back. Everything else
+ * (429 rate limit, 404, 5xx, network failures, timeouts) is transient, so it is
+ * left as a plain Error and existing per-provider fallbacks keep working.
+ */
+const OAUTH_CREDENTIAL_REJECTION_STATUSES = new Set([400, 401, 403]);
+function throwOnTokenExchangeFailure(res, detail, status) {
+    if (OAUTH_CREDENTIAL_REJECTION_STATUSES.has(status)) {
+        throw new CredentialResolutionError("Gemini ADC", "oauth-credential-rejected");
+    }
+    throw new Error(`Gemini ADC token exchange failed (${status}): ${detail.slice(0, 300)}`);
+}
+function redactValues(text, values) {
+    let redacted = text;
+    for (const value of values) {
+        if (value)
+            redacted = redactCredential(redacted, value);
+    }
+    return redacted;
+}
+async function exchangeRefreshToken(cfg, signal) {
+    const body = new URLSearchParams({
+        client_id: cfg.client_id ?? "",
+        client_secret: cfg.client_secret ?? "",
+        refresh_token: cfg.refresh_token ?? "",
+        grant_type: "refresh_token",
+    });
+    const res = await fetch(TOKEN_ENDPOINT, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+        signal,
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        throwOnTokenExchangeFailure(res, redactValues(text, [cfg.client_secret, cfg.refresh_token]), res.status);
+    }
+    return parseTokenExchangeResponse(text, "Gemini ADC token exchange");
+}
+async function exchangeServiceAccountJwt(cfg, signal) {
+    if (!cfg.client_email || !cfg.private_key) {
+        throw new Error("Gemini ADC service_account file is missing client_email or private_key");
+    }
+    const now = Math.floor(Date.now() / 1000);
+    const header = { alg: "RS256", typ: "JWT" };
+    const claims = {
+        iss: cfg.client_email,
+        scope: "https://www.googleapis.com/auth/cloud-platform",
+        aud: TOKEN_ENDPOINT,
+        iat: now,
+        exp: now + 3600,
+    };
+    const encodePart = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url");
+    const assertion = `${encodePart(header)}.${encodePart(claims)}`;
+    const signer = createSign("RSA-SHA256");
+    signer.update(assertion);
+    signer.end();
+    const signature = signer.sign(cfg.private_key, "base64url");
+    const jwt = `${assertion}.${signature}`;
+    const body = new URLSearchParams({
+        grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+        assertion: jwt,
+    });
+    const res = await fetch(TOKEN_ENDPOINT, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+        signal,
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        throwOnTokenExchangeFailure(res, redactValues(text, [jwt, cfg.private_key]), res.status);
+    }
+    return parseTokenExchangeResponse(text, "Gemini ADC service account token exchange");
+}
+export async function getAdcAccessToken(signal) {
+    if (cachedToken && cachedToken.expiresAt > Date.now()) {
+        return cachedToken.token;
+    }
+    const cfg = await loadAdcFile();
+    const type = cfg.type ?? "authorized_user";
+    if (type === "authorized_user") {
+        cachedToken = await exchangeRefreshToken(cfg, signal);
+    }
+    else if (type === "service_account") {
+        cachedToken = await exchangeServiceAccountJwt(cfg, signal);
+    }
+    else {
+        throw new Error(`Gemini ADC unsupported credential type "${type}" (expected authorized_user or service_account)`);
+    }
+    return cachedToken.token;
+}
+export function isGeminiAdcAvailable() {
+    if (!isAdcAuthSelected())
+        return false;
+    // An explicitly configured Gemini API key takes precedence over ADC, so
+    // existing key-based setups and their unit tests keep working unchanged.
+    if (hasGeminiApiKeySource())
+        return false;
+    // An explicit base URL (gateway/relay/proxy) also wins over ADC: if the
+    // user deliberately routed Gemini somewhere, honor that routing.
+    if (hasExplicitApiBase())
+        return false;
+    if (!getAdcProject() || !getAdcLocation())
+        return false;
+    return existsSync(getAdcPath());
+}
+function hasGeminiApiKeySource() {
+    const configured = loadConfig().geminiApiKey;
+    if (typeof configured === "string" && configured.trim())
+        return true;
+    const fromEnv = process.env.GEMINI_API_KEY?.trim();
+    return !!fromEnv;
+}
+function hasExplicitApiBase() {
+    const fromEnv = process.env.GOOGLE_GEMINI_BASE_URL?.trim();
+    if (fromEnv)
+        return true;
+    const configured = loadConfig().geminiBaseUrl;
+    return typeof configured === "string" && configured.trim().length > 0;
+}
+export function redactAdcToken(text) {
+    return cachedToken ? redactCredential(text, cachedToken.token) : text;
+}
+//# sourceMappingURL=gemini-adc.js.map

package/dist/humain/web-access/vendor/gemini-adc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-adc.js","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/gemini-adc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAErF,MAAM,WAAW,GAAG,sBAAsB,EAAE,CAAC;AAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,sCAAsC,CAAC,CAAC;AACtG,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,WAAW,GAAG,mCAAmC,CAAC;AACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,eAAe,GAAG,MAAM,CAAC;AAU/B,IAAI,YAAY,GAA2B,IAAI,CAAC;AAEhD,SAAS,UAAU;IAClB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,YAAY,GAAG,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClD,CAAC;QACD,YAAY,GAAG,MAAyB,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,YAAY,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,OAAe;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,CAAC,UAAU,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAO,CACN,mBAAmB,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,sBAAsB,CAAC;QACvE,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,OAAO,mBAAmB,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU;IAClB,OAAO,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,QAAgB;IACjE,OAAO,GAAG,WAAW,IAAI,kBAAkB,aAAa,kBAAkB,CAAC,OAAO,CAAC,cAAc,kBAAkB,CAAC,QAAQ,CAAC,oBAAoB,CAAC;AACnJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IAC1C,OAAO,MAAM,KAAK,WAAW,CAAC;AAC/B,CAAC;AAcD,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9G,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B,EAAE,IAAY,EAAE,OAAe;IACrF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,eAAe,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,iBAAiB,CAAC;IAC9D,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAChC,OAAO;YACN,IAAI;YACJ,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,iCAAiC,CAAC;YACjF,aAAa,EAAE,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC;YACzF,aAAa,EAAE,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC;YACzF,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC;SACvD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAChC,OAAO;YACN,IAAI;YACJ,YAAY,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,iCAAiC,CAAC;YACvF,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,iCAAiC,CAAC;YACrF,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC;YACrD,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC;YAC3C,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC;SACvD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAE,OAAe;IAChE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,iCAAiC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;IAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,8BAA8B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,KAAK,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACvG,CAAC;AACF,CAAC;AAOD,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C,MAAM,UAAU,kBAAkB;IACjC,WAAW,GAAG,IAAI,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,mCAAmC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAErE,SAAS,2BAA2B,CAAC,GAAa,EAAE,MAAc,EAAE,MAAc;IACjF,IAAI,mCAAmC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,yBAAyB,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAiC;IACpE,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAK;YAAE,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAY,EAAE,MAAoB;IACrE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;QACtC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;QACtC,UAAU,EAAE,eAAe;KAC3B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;QACJ,MAAM;KACN,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,2BAA2B,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,0BAA0B,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,GAAY,EAAE,MAAoB;IAC1E,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG;QACd,GAAG,EAAE,GAAG,CAAC,YAAY;QACrB,KAAK,EAAE,gDAAgD;QACvD,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,IAAI;KACf,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE,CAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,EAAE,CAAC;IACb,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC;IAExC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAChC,UAAU,EAAE,6CAA6C;QACzD,SAAS,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;QACJ,MAAM;KACN,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,2BAA2B,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,0BAA0B,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAoB;IAC3D,IAAI,WAAW,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACvD,OAAO,WAAW,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,iBAAiB,CAAC;IAC3C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAChC,WAAW,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;SAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACvC,WAAW,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,iDAAiD,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,qBAAqB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,kBAAkB,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB;IAC7B,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC,YAAY,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACnD,OAAO,CAAC,CAAC,OAAO,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC,aAAa,CAAC;IAC9C,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IAC1C,OAAO,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { createSign } from \"node:crypto\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { getWebSearchConfigPath } from \"./utils.ts\";\nimport { redactCredential, CredentialResolutionError } from \"./credential-source.ts\";\n\nconst CONFIG_PATH = getWebSearchConfigPath();\nconst DEFAULT_ADC_PATH = join(homedir(), \".config\", \"gcloud\", \"application_default_credentials.json\");\nconst TOKEN_ENDPOINT = \"https://oauth2.googleapis.com/token\";\nconst VERTEX_HOST = \"https://aiplatform.googleapis.com\";\nconst VERTEX_API_VERSION = \"v1\";\nconst REFRESH_SKEW_MS = 60_000;\n\ninterface GeminiAdcConfig {\n\tgeminiAuth?: unknown;\n\tgeminiProject?: unknown;\n\tgeminiLocation?: unknown;\n\tgeminiApiKey?: unknown;\n\tgeminiBaseUrl?: unknown;\n}\n\nlet cachedConfig: GeminiAdcConfig | null = null;\n\nfunction loadConfig(): GeminiAdcConfig {\n\tif (cachedConfig) return cachedConfig;\n\tif (!existsSync(CONFIG_PATH)) {\n\t\tcachedConfig = {};\n\t\treturn cachedConfig;\n\t}\n\tconst raw = readFileSync(CONFIG_PATH, \"utf-8\");\n\ttry {\n\t\tconst parsed = JSON.parse(raw);\n\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\tthrow new Error(\"config root must be an object\");\n\t\t}\n\t\tcachedConfig = parsed as GeminiAdcConfig;\n\t} catch (err) {\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tthrow new Error(`Failed to parse ${CONFIG_PATH}: ${message}`);\n\t}\n\treturn cachedConfig;\n}\n\nfunction normalizeIdentifier(value: unknown, envName: string): string | null {\n\tif (typeof value === \"string\") {\n\t\tconst trimmed = value.trim();\n\t\tif (trimmed) return trimmed;\n\t}\n\tconst fromEnv = process.env[envName]?.trim();\n\treturn fromEnv ? fromEnv : null;\n}\n\nexport function isAdcAuthSelected(): boolean {\n\treturn (loadConfig().geminiAuth ?? \"\").toString().trim().toLowerCase() === \"adc\";\n}\n\nexport function getAdcProject(): string | null {\n\treturn (\n\t\tnormalizeIdentifier(loadConfig().geminiProject, \"GOOGLE_CLOUD_PROJECT\") ??\n\t\tnormalizeIdentifier(null, \"GCLOUD_PROJECT\")\n\t);\n}\n\nexport function getAdcLocation(): string | null {\n\treturn normalizeIdentifier(loadConfig().geminiLocation, \"GOOGLE_CLOUD_LOCATION\");\n}\n\nfunction getAdcPath(): string {\n\treturn process.env.GOOGLE_APPLICATION_CREDENTIALS?.trim() || DEFAULT_ADC_PATH;\n}\n\nexport function getVertexApiBase(project: string, location: string): string {\n\treturn `${VERTEX_HOST}/${VERTEX_API_VERSION}/projects/${encodeURIComponent(project)}/locations/${encodeURIComponent(location)}/publishers/google`;\n}\n\nexport function isVertexHost(origin: string): boolean {\n\treturn origin === VERTEX_HOST;\n}\n\ninterface AdcFile {\n\ttype?: string;\n\tclient_id?: string;\n\tclient_secret?: string;\n\trefresh_token?: string;\n\tclient_email?: string;\n\tprivate_key?: string;\n\tprivate_key_id?: string;\n\ttoken_uri?: string;\n\tuniverse_domain?: string;\n}\n\nfunction objectRecord(value: unknown): Record<string, unknown> | null {\n\treturn value && typeof value === \"object\" && !Array.isArray(value) ? value as Record<string, unknown> : null;\n}\n\nfunction stringField(record: Record<string, unknown>, name: string): string | undefined {\n\tconst value = record[name];\n\treturn typeof value === \"string\" ? value : undefined;\n}\n\nfunction requiredString(record: Record<string, unknown>, name: string, context: string): string {\n\tconst value = stringField(record, name)?.trim();\n\tif (!value) throw new Error(`${context} is missing ${name}`);\n\treturn value;\n}\n\nfunction parseAdcFile(raw: string): AdcFile {\n\tconst parsed = objectRecord(JSON.parse(raw));\n\tif (!parsed) throw new Error(\"credential root must be an object\");\n\tconst type = stringField(parsed, \"type\") ?? \"authorized_user\";\n\tif (type === \"authorized_user\") {\n\t\treturn {\n\t\t\ttype,\n\t\t\tclient_id: requiredString(parsed, \"client_id\", \"Gemini ADC authorized_user file\"),\n\t\t\tclient_secret: requiredString(parsed, \"client_secret\", \"Gemini ADC authorized_user file\"),\n\t\t\trefresh_token: requiredString(parsed, \"refresh_token\", \"Gemini ADC authorized_user file\"),\n\t\t\tuniverse_domain: stringField(parsed, \"universe_domain\"),\n\t\t};\n\t}\n\tif (type === \"service_account\") {\n\t\treturn {\n\t\t\ttype,\n\t\t\tclient_email: requiredString(parsed, \"client_email\", \"Gemini ADC service_account file\"),\n\t\t\tprivate_key: requiredString(parsed, \"private_key\", \"Gemini ADC service_account file\"),\n\t\t\tprivate_key_id: stringField(parsed, \"private_key_id\"),\n\t\t\ttoken_uri: stringField(parsed, \"token_uri\"),\n\t\t\tuniverse_domain: stringField(parsed, \"universe_domain\"),\n\t\t};\n\t}\n\treturn { type };\n}\n\nfunction parseTokenExchangeResponse(text: string, context: string): CachedToken {\n\tlet raw: unknown;\n\ttry {\n\t\traw = JSON.parse(text);\n\t} catch (err) {\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tthrow new Error(`${context} returned invalid JSON: ${message}`);\n\t}\n\tconst parsed = objectRecord(raw);\n\tif (!parsed) throw new Error(`${context} returned a non-object response`);\n\tconst token = stringField(parsed, \"access_token\")?.trim();\n\tif (!token) throw new Error(`${context} returned no access_token`);\n\tconst expiresIn = parsed.expires_in ?? 3600;\n\tif (typeof expiresIn !== \"number\" || !Number.isFinite(expiresIn)) {\n\t\tthrow new Error(`${context} returned invalid expires_in`);\n\t}\n\treturn { token, expiresAt: Date.now() + Math.max((expiresIn * 1000) - REFRESH_SKEW_MS, 60_000) };\n}\n\nasync function loadAdcFile(): Promise<AdcFile> {\n\tconst path = getAdcPath();\n\tif (!path || !existsSync(path)) {\n\t\tthrow new Error(`Google Application Default Credentials file not found at ${path}`);\n\t}\n\tconst raw = readFileSync(path, \"utf-8\");\n\ttry {\n\t\treturn parseAdcFile(raw);\n\t} catch (err) {\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tthrow new Error(`Failed to parse Google Application Default Credentials file at ${path}: ${message}`);\n\t}\n}\n\ninterface CachedToken {\n\ttoken: string;\n\texpiresAt: number;\n}\n\nlet cachedToken: CachedToken | null = null;\n\nexport function clearAdcTokenCache(): void {\n\tcachedToken = null;\n}\n\n/**\n * Classifies a failed OAuth token exchange. Only explicit credential/authorization\n * rejections (400 invalid_client/invalid_grant/invalid_scope, 401, 403 denied)\n * mean the configured credentials themselves were refused — a hard credential\n * problem callers should surface rather than silently fall back. Everything else\n * (429 rate limit, 404, 5xx, network failures, timeouts) is transient, so it is\n * left as a plain Error and existing per-provider fallbacks keep working.\n */\nconst OAUTH_CREDENTIAL_REJECTION_STATUSES = new Set([400, 401, 403]);\n\nfunction throwOnTokenExchangeFailure(res: Response, detail: string, status: number): never {\n\tif (OAUTH_CREDENTIAL_REJECTION_STATUSES.has(status)) {\n\t\tthrow new CredentialResolutionError(\"Gemini ADC\", \"oauth-credential-rejected\");\n\t}\n\tthrow new Error(`Gemini ADC token exchange failed (${status}): ${detail.slice(0, 300)}`);\n}\n\nfunction redactValues(text: string, values: Array<string | undefined>): string {\n\tlet redacted = text;\n\tfor (const value of values) {\n\t\tif (value) redacted = redactCredential(redacted, value);\n\t}\n\treturn redacted;\n}\n\nasync function exchangeRefreshToken(cfg: AdcFile, signal?: AbortSignal): Promise<CachedToken> {\n\tconst body = new URLSearchParams({\n\t\tclient_id: cfg.client_id ?? \"\",\n\t\tclient_secret: cfg.client_secret ?? \"\",\n\t\trefresh_token: cfg.refresh_token ?? \"\",\n\t\tgrant_type: \"refresh_token\",\n\t});\n\tconst res = await fetch(TOKEN_ENDPOINT, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n\t\tbody,\n\t\tsignal,\n\t});\n\tconst text = await res.text();\n\tif (!res.ok) {\n\t\tthrowOnTokenExchangeFailure(res, redactValues(text, [cfg.client_secret, cfg.refresh_token]), res.status);\n\t}\n\treturn parseTokenExchangeResponse(text, \"Gemini ADC token exchange\");\n}\n\nasync function exchangeServiceAccountJwt(cfg: AdcFile, signal?: AbortSignal): Promise<CachedToken> {\n\tif (!cfg.client_email || !cfg.private_key) {\n\t\tthrow new Error(\"Gemini ADC service_account file is missing client_email or private_key\");\n\t}\n\tconst now = Math.floor(Date.now() / 1000);\n\tconst header = { alg: \"RS256\", typ: \"JWT\" };\n\tconst claims = {\n\t\tiss: cfg.client_email,\n\t\tscope: \"https://www.googleapis.com/auth/cloud-platform\",\n\t\taud: TOKEN_ENDPOINT,\n\t\tiat: now,\n\t\texp: now + 3600,\n\t};\n\tconst encodePart = (obj: object): string =>\n\t\tBuffer.from(JSON.stringify(obj)).toString(\"base64url\");\n\tconst assertion = `${encodePart(header)}.${encodePart(claims)}`;\n\tconst signer = createSign(\"RSA-SHA256\");\n\tsigner.update(assertion);\n\tsigner.end();\n\tconst signature = signer.sign(cfg.private_key, \"base64url\");\n\tconst jwt = `${assertion}.${signature}`;\n\n\tconst body = new URLSearchParams({\n\t\tgrant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n\t\tassertion: jwt,\n\t});\n\tconst res = await fetch(TOKEN_ENDPOINT, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n\t\tbody,\n\t\tsignal,\n\t});\n\tconst text = await res.text();\n\tif (!res.ok) {\n\t\tthrowOnTokenExchangeFailure(res, redactValues(text, [jwt, cfg.private_key]), res.status);\n\t}\n\treturn parseTokenExchangeResponse(text, \"Gemini ADC service account token exchange\");\n}\n\nexport async function getAdcAccessToken(signal?: AbortSignal): Promise<string> {\n\tif (cachedToken && cachedToken.expiresAt > Date.now()) {\n\t\treturn cachedToken.token;\n\t}\n\tconst cfg = await loadAdcFile();\n\tconst type = cfg.type ?? \"authorized_user\";\n\tif (type === \"authorized_user\") {\n\t\tcachedToken = await exchangeRefreshToken(cfg, signal);\n\t} else if (type === \"service_account\") {\n\t\tcachedToken = await exchangeServiceAccountJwt(cfg, signal);\n\t} else {\n\t\tthrow new Error(`Gemini ADC unsupported credential type \"${type}\" (expected authorized_user or service_account)`);\n\t}\n\treturn cachedToken.token;\n}\n\nexport function isGeminiAdcAvailable(): boolean {\n\tif (!isAdcAuthSelected()) return false;\n\t// An explicitly configured Gemini API key takes precedence over ADC, so\n\t// existing key-based setups and their unit tests keep working unchanged.\n\tif (hasGeminiApiKeySource()) return false;\n\t// An explicit base URL (gateway/relay/proxy) also wins over ADC: if the\n\t// user deliberately routed Gemini somewhere, honor that routing.\n\tif (hasExplicitApiBase()) return false;\n\tif (!getAdcProject() || !getAdcLocation()) return false;\n\treturn existsSync(getAdcPath());\n}\n\nfunction hasGeminiApiKeySource(): boolean {\n\tconst configured = loadConfig().geminiApiKey;\n\tif (typeof configured === \"string\" && configured.trim()) return true;\n\tconst fromEnv = process.env.GEMINI_API_KEY?.trim();\n\treturn !!fromEnv;\n}\n\nfunction hasExplicitApiBase(): boolean {\n\tconst fromEnv = process.env.GOOGLE_GEMINI_BASE_URL?.trim();\n\tif (fromEnv) return true;\n\tconst configured = loadConfig().geminiBaseUrl;\n\treturn typeof configured === \"string\" && configured.trim().length > 0;\n}\n\nexport function redactAdcToken(text: string): string {\n\treturn cachedToken ? redactCredential(text, cachedToken.token) : text;\n}\n"]}

package/dist/humain/web-access/vendor/gemini-api.d.ts

@@ -7,9 +7,15 @@ export declare function getUploadBase(): string;
 export declare function getCloudflareApiKey(): string | null;
 export declare function isGatewayConfigured(): boolean;
 export declare function buildAuthHeaders(apiKey?: string | null, cloudflareApiKey?: string | null): Record<string, string>;
-export declare function redactGeminiApiResponse(response: Response, text: string, apiKey?: string | null): string;
+export declare function redactGeminiApiResponse(response: Response, text: string, apiKey?: string | null, adcToken?: string | null): string;
 export declare function fetchGeminiApi(url: string | URL, init?: RequestInit, apiKey?: string | null): Promise<Response>;
 export declare function isGeminiApiAvailable(): boolean;
+/**
+ * Whether the Gemini Files-API paths (YouTube and local video analysis) can
+ * authenticate. These use the Gemini Files API and metadata endpoints, which do
+ * not support ADC, so they still require an API key or a Cloudflare gateway.
+ */
+export declare function isGeminiApiAvailableWithVideo(): boolean;
 export interface GeminiApiOptions {
     apiKey?: string;
     model?: string;

package/dist/humain/web-access/vendor/gemini-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-api.d.ts","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/gemini-api.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,QAAQ,qDAAuC,CAAC;AAE7D,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAgDhD,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO5E;AAED,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAeD,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAEnD;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAM7C;AAED,wBAAgB,gBAAgB,CAAC,MAAM,GAAE,MAAM,GAAG,IAAW,EAAE,gBAAgB,GAAE,MAAM,GAAG,IAAkC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGpJ;AAWD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGxG;AAED,wBAAsB,cAAc,CACnC,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,GAAE,WAAgB,EACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,QAAQ,CAAC,CAkCnB;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAM9C;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,2BAA2B,CAAC,CAiDtC;AAED,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAiDjB"}
+{"version":3,"file":"gemini-api.d.ts","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/gemini-api.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,QAAQ,qDAAuC,CAAC;AAE7D,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAgDhD,wBAAsB,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO5E;AAED,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAO5C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAeD,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAEnD;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAM7C;AAED,wBAAgB,gBAAgB,CAAC,MAAM,GAAE,MAAM,GAAG,IAAW,EAAE,gBAAgB,GAAE,MAAM,GAAG,IAAkC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGpJ;AAcD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGlI;AAED,wBAAsB,cAAc,CACnC,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,GAAE,WAAgB,EACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,QAAQ,CAAC,CAgDnB;AAUD,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,2BAA2B,CAAC,CAkDtC;AAED,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAiDjB"}

package/dist/humain/web-access/vendor/gemini-api.js

@@ -1,6 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { hasCredentialSource, redactCredential, resolveCredential } from "./credential-source.js";
 import { getWebSearchConfigPath } from "./utils.js";
+import { isGeminiAdcAvailable, getAdcAccessToken, getAdcProject, getAdcLocation, getVertexApiBase, isVertexHost, } from "./gemini-adc.js";
 const DEFAULT_API_HOST = "https://generativelanguage.googleapis.com";
 const API_VERSION = "v1beta";
 export const API_BASE = `${DEFAULT_API_HOST}/${API_VERSION}`;
@@ -57,6 +58,11 @@ export function getApiHost() {
         DEFAULT_API_HOST);
 }
 export function getVersionedApiBase() {
+    const project = getAdcProject();
+    const location = getAdcLocation();
+    if (isGeminiAdcAvailable() && project && location) {
+        return getVertexApiBase(project, location);
+    }
     return `${getApiHost()}/${API_VERSION}`;
 }
 export function getUploadBase() {
@@ -88,13 +94,16 @@ export function buildAuthHeaders(apiKey = null, cloudflareApiKey = getLegacyClou
         return apiKey ? { "x-goog-api-key": apiKey } : {};
     return cloudflareApiKey ? { "cf-aig-authorization": `Bearer ${cloudflareApiKey}` } : {};
 }
-function redactGeminiCredentials(text, apiKey, cloudflareApiKey) {
-    return redactCredential(redactCredential(text, apiKey), cloudflareApiKey);
+function redactGeminiCredentials(text, apiKey, cloudflareApiKey, adcToken) {
+    let out = redactCredential(redactCredential(text, apiKey), cloudflareApiKey);
+    if (adcToken)
+        out = redactCredential(out, adcToken);
+    return out;
 }
 const responseCredentials = new WeakMap();
-export function redactGeminiApiResponse(response, text, apiKey) {
+export function redactGeminiApiResponse(response, text, apiKey, adcToken) {
     const credentials = responseCredentials.get(response);
-    return redactGeminiCredentials(text, credentials?.apiKey ?? apiKey, credentials?.cloudflareApiKey);
+    return redactGeminiCredentials(text, credentials?.apiKey ?? apiKey, credentials?.cloudflareApiKey, credentials?.adcToken ?? adcToken);
 }
 export async function fetchGeminiApi(url, init = {}, apiKey) {
     const parsedUrl = new URL(url);
@@ -103,29 +112,44 @@ export async function fetchGeminiApi(url, init = {}, apiKey) {
             throw new Error("Gemini API credential query parameters are not allowed");
         }
     }
-    const resolvedApiKey = apiKey === undefined ? await getApiKey(init.signal ?? undefined) : apiKey;
+    const project = getAdcProject();
+    const location = getAdcLocation();
+    const adcMode = isGeminiAdcAvailable() && !!project && !!location && isVertexHost(parsedUrl.origin);
+    let adcToken = null;
+    if (adcMode) {
+        adcToken = await getAdcAccessToken(init.signal ?? undefined);
+    }
+    const resolvedApiKey = adcMode ? null : (apiKey === undefined ? await getApiKey(init.signal ?? undefined) : apiKey);
     const cloudflareApiKey = isCloudflareGateway() ? await resolveCloudflareApiKey(init.signal ?? undefined) : null;
     const allowedOrigins = new Set([
         new URL(getApiHost()).origin,
         new URL(DEFAULT_API_HOST).origin,
+        ...(adcMode ? [parsedUrl.origin] : []),
     ]);
-    if ((resolvedApiKey || isGatewayConfigured()) && !allowedOrigins.has(parsedUrl.origin)) {
+    const needsAuth = resolvedApiKey || isGatewayConfigured() || adcMode;
+    if (needsAuth && !allowedOrigins.has(parsedUrl.origin)) {
         throw new Error("Gemini API request host is not allowed");
     }
     const headers = new Headers(init.headers);
     headers.delete("x-goog-api-key");
     headers.delete("cf-aig-authorization");
-    for (const [name, value] of Object.entries(buildAuthHeaders(resolvedApiKey, cloudflareApiKey))) {
-        headers.set(name, value);
+    headers.delete("authorization");
+    if (adcMode && adcToken) {
+        headers.set("Authorization", `Bearer ${adcToken}`);
+    }
+    else {
+        for (const [name, value] of Object.entries(buildAuthHeaders(resolvedApiKey, cloudflareApiKey))) {
+            headers.set(name, value);
+        }
     }
     try {
         const response = await fetch(parsedUrl, { ...init, headers });
-        responseCredentials.set(response, { apiKey: resolvedApiKey, cloudflareApiKey });
+        responseCredentials.set(response, { apiKey: resolvedApiKey, cloudflareApiKey, adcToken });
         return response;
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
-        const redactedMessage = redactGeminiCredentials(message, resolvedApiKey, cloudflareApiKey);
+        const redactedMessage = redactGeminiCredentials(message, resolvedApiKey, cloudflareApiKey, adcToken);
         if (redactedMessage === message)
             throw error;
         const redactedError = new Error(redactedMessage);
@@ -134,20 +158,32 @@ export async function fetchGeminiApi(url, init = {}, apiKey) {
         throw redactedError;
     }
 }
-export function isGeminiApiAvailable() {
+function hasGeminiApiKeySource() {
     return hasCredentialSource({
         provider: "Gemini",
         configuredValue: loadConfig().geminiApiKey,
         environmentValue: process.env.GEMINI_API_KEY,
-    }) || isGatewayConfigured();
+    });
+}
+export function isGeminiApiAvailable() {
+    return isGeminiAdcAvailable() || hasGeminiApiKeySource() || isGatewayConfigured();
+}
+/**
+ * Whether the Gemini Files-API paths (YouTube and local video analysis) can
+ * authenticate. These use the Gemini Files API and metadata endpoints, which do
+ * not support ADC, so they still require an API key or a Cloudflare gateway.
+ */
+export function isGeminiApiAvailableWithVideo() {
+    return hasGeminiApiKeySource() || isGatewayConfigured();
 }
 export async function queryGeminiApiWithInlineData(prompt, data, mimeType, options = {}) {
     const signal = withTimeout(options.signal, options.timeoutMs ?? 120000);
-    const apiKey = options.apiKey ?? await getApiKey(signal);
-    if (!apiKey && !isGatewayConfigured()) {
+    const apiKey = isGeminiAdcAvailable() ? null : (options.apiKey ?? await getApiKey(signal));
+    if (!apiKey && !isGatewayConfigured() && !isGeminiAdcAvailable()) {
         throw new Error("Gemini API not configured. Either:\n" +
             `  1. Configure geminiApiKey in ${CONFIG_PATH} or set GEMINI_API_KEY\n` +
-            "  2. Set GOOGLE_GEMINI_BASE_URL + CLOUDFLARE_API_KEY for Cloudflare AI Gateway routing");
+            "  2. Set GOOGLE_GEMINI_BASE_URL + CLOUDFLARE_API_KEY for Cloudflare AI Gateway routing\n" +
+            "  3. Set geminiAuth to \"adc\" with a Google Cloud ADC (GOOGLE_APPLICATION_CREDENTIALS) + project/location");
     }
     const model = options.model ?? DEFAULT_MODEL;
     const url = `${getVersionedApiBase()}/models/${model}:generateContent`;

package/dist/humain/web-access/vendor/gemini-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-api.js","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/gemini-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AACrE,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAC7D,MAAM,WAAW,GAAG,sBAAsB,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAQhD,IAAI,YAAY,GAA2B,IAAI,CAAC;AAEhD,SAAS,UAAU;IAClB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,YAAY,GAAG,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC;QACJ,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,OAAO,YAAY,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,SAAiB;IACtE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB;IAC3B,OAAO,UAAU,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAoB;IACnD,OAAO,iBAAiB,CAAC;QACxB,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,UAAU,EAAE,CAAC,YAAY;QAC1C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC5C,MAAM;KACN,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACzB,OAAO,CACN,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACpD,gBAAgB,CAAC,UAAU,EAAE,CAAC,aAAa,CAAC;QAC5C,gBAAgB,CAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,GAAG,UAAU,EAAE,IAAI,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAO,GAAG,UAAU,EAAE,WAAW,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB;IACjC,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAoB;IAC1D,OAAO,iBAAiB,CAAC;QACxB,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,UAAU,EAAE,CAAC,gBAAgB;QAC9C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAChD,MAAM;KACN,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,yBAAyB,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,mBAAmB,EAAE,IAAI,mBAAmB,CAAC;QACnD,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,UAAU,EAAE,CAAC,gBAAgB;QAC9C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;KAChD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAM,GAAkB,IAAI,EAAE,gBAAgB,GAAkB,yBAAyB,EAAE;IAC3H,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,UAAU,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,MAAiC,EAAE,gBAA2C;IAC5H,OAAO,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAGnC,CAAC;AAEL,MAAM,UAAU,uBAAuB,CAAC,QAAkB,EAAE,IAAY,EAAE,MAAsB;IAC/F,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,OAAO,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,IAAI,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAiB,EACjB,IAAI,GAAgB,EAAE,EACtB,MAAsB;IAEtB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjG,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC9B,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM;QAC5B,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,IAAI,mBAAmB,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC3F,IAAI,eAAe,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,KAAK,YAAY,KAAK;YAAE,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5D,MAAM,aAAa,CAAC;IACrB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,mBAAmB,CAAC;QAC1B,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,UAAU,EAAE,CAAC,YAAY;QAC1C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;KAC5C,CAAC,IAAI,mBAAmB,EAAE,CAAC;AAC7B,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,sCAAsC;YACtC,kCAAkC,WAAW,0BAA0B;YACvE,wFAAwF,CACxF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,mBAAmB,EAAE,WAAW,KAAK,kBAAkB,CAAC;IACvE,MAAM,IAAI,GAAG;QACZ,QAAQ,EAAE;YACT;gBACC,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE;oBACN,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;oBAClC,EAAE,IAAI,EAAE,MAAM,EAAE;iBAChB;aACD;SACD;KACD,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACN,EAAE,MAAM,CAAC,CAAC;IAEX,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK;QACrC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACzB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEnB,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAc,EACd,QAAgB,EAChB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,sCAAsC;YACtC,kCAAkC,WAAW,0BAA0B;YACvE,wFAAwF,CACxF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,mBAAmB,EAAE,WAAW,KAAK,kBAAkB,CAAC;IAEvE,MAAM,QAAQ,GAA2B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/D,IAAI,OAAO,CAAC,QAAQ;QAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAE3D,MAAM,IAAI,GAAG;QACZ,QAAQ,EAAE;YACT;gBACC,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE;oBACN,EAAE,QAAQ,EAAE;oBACZ,EAAE,IAAI,EAAE,MAAM,EAAE;iBAChB;aACD;SACD;KACD,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACN,EAAE,MAAM,CAAC,CAAC;IAEX,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK;QAChD,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACnB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { hasCredentialSource, redactCredential, resolveCredential } from \"./credential-source.ts\";\nimport { getWebSearchConfigPath } from \"./utils.ts\";\n\nconst DEFAULT_API_HOST = \"https://generativelanguage.googleapis.com\";\nconst API_VERSION = \"v1beta\";\nexport const API_BASE = `${DEFAULT_API_HOST}/${API_VERSION}`;\nconst CONFIG_PATH = getWebSearchConfigPath();\nexport const DEFAULT_MODEL = \"gemini-3.6-flash\";\n\ninterface GeminiApiConfig {\n\tgeminiApiKey?: unknown;\n\tgeminiBaseUrl?: unknown;\n\tcloudflareApiKey?: unknown;\n}\n\nlet cachedConfig: GeminiApiConfig | null = null;\n\nfunction loadConfig(): GeminiApiConfig {\n\tif (cachedConfig) return cachedConfig;\n\tif (!existsSync(CONFIG_PATH)) {\n\t\tcachedConfig = {};\n\t\treturn cachedConfig;\n\t}\n\n\tconst raw = readFileSync(CONFIG_PATH, \"utf-8\");\n\ttry {\n\t\tcachedConfig = JSON.parse(raw) as GeminiApiConfig;\n\t\treturn cachedConfig;\n\t} catch (err) {\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tthrow new Error(`Failed to parse ${CONFIG_PATH}: ${message}`);\n\t}\n}\n\nfunction withTimeout(signal: AbortSignal | undefined, timeoutMs: number): AbortSignal {\n\tconst timeout = AbortSignal.timeout(timeoutMs);\n\treturn signal ? AbortSignal.any([signal, timeout]) : timeout;\n}\n\nfunction normalizeApiKey(value: unknown): string | null {\n\tif (typeof value !== \"string\") return null;\n\tconst normalized = value.trim();\n\treturn normalized.length > 0 ? normalized : null;\n}\n\nfunction normalizeBaseUrl(value: unknown): string | null {\n\tif (typeof value !== \"string\") return null;\n\tconst normalized = value.trim().replace(/\\/+$/, \"\");\n\treturn normalized.length > 0 ? normalized : null;\n}\n\nfunction isCloudflareGateway(): boolean {\n\treturn getApiHost().includes(\"gateway.ai.cloudflare.com\");\n}\n\nexport async function getApiKey(signal?: AbortSignal): Promise<string | null> {\n\treturn resolveCredential({\n\t\tprovider: \"Gemini\",\n\t\tconfiguredValue: loadConfig().geminiApiKey,\n\t\tenvironmentValue: process.env.GEMINI_API_KEY,\n\t\tsignal,\n\t});\n}\n\nexport function getApiHost(): string {\n\treturn (\n\t\tnormalizeBaseUrl(process.env.GOOGLE_GEMINI_BASE_URL) ??\n\t\tnormalizeBaseUrl(loadConfig().geminiBaseUrl) ??\n\t\tDEFAULT_API_HOST\n\t);\n}\n\nexport function getVersionedApiBase(): string {\n\treturn `${getApiHost()}/${API_VERSION}`;\n}\n\nexport function getUploadBase(): string {\n\treturn `${getApiHost()}/upload/${API_VERSION}`;\n}\n\nfunction getLegacyCloudflareApiKey(): string | null {\n\treturn normalizeApiKey(process.env.CLOUDFLARE_API_KEY) ?? normalizeApiKey(loadConfig().cloudflareApiKey);\n}\n\nasync function resolveCloudflareApiKey(signal?: AbortSignal): Promise<string | null> {\n\treturn resolveCredential({\n\t\tprovider: \"Cloudflare\",\n\t\tconfiguredValue: loadConfig().cloudflareApiKey,\n\t\tenvironmentValue: process.env.CLOUDFLARE_API_KEY,\n\t\tsignal,\n\t});\n}\n\nexport function getCloudflareApiKey(): string | null {\n\treturn getLegacyCloudflareApiKey();\n}\n\nexport function isGatewayConfigured(): boolean {\n\treturn isCloudflareGateway() && hasCredentialSource({\n\t\tprovider: \"Cloudflare\",\n\t\tconfiguredValue: loadConfig().cloudflareApiKey,\n\t\tenvironmentValue: process.env.CLOUDFLARE_API_KEY,\n\t});\n}\n\nexport function buildAuthHeaders(apiKey: string | null = null, cloudflareApiKey: string | null = getLegacyCloudflareApiKey()): Record<string, string> {\n\tif (!isCloudflareGateway()) return apiKey ? { \"x-goog-api-key\": apiKey } : {};\n\treturn cloudflareApiKey ? { \"cf-aig-authorization\": `Bearer ${cloudflareApiKey}` } : {};\n}\n\nfunction redactGeminiCredentials(text: string, apiKey: string | null | undefined, cloudflareApiKey: string | null | undefined): string {\n\treturn redactCredential(redactCredential(text, apiKey), cloudflareApiKey);\n}\n\nconst responseCredentials = new WeakMap<Response, {\n\tapiKey: string | null | undefined;\n\tcloudflareApiKey: string | null | undefined;\n}>();\n\nexport function redactGeminiApiResponse(response: Response, text: string, apiKey?: string | null): string {\n\tconst credentials = responseCredentials.get(response);\n\treturn redactGeminiCredentials(text, credentials?.apiKey ?? apiKey, credentials?.cloudflareApiKey);\n}\n\nexport async function fetchGeminiApi(\n\turl: string | URL,\n\tinit: RequestInit = {},\n\tapiKey?: string | null,\n): Promise<Response> {\n\tconst parsedUrl = new URL(url);\n\tfor (const name of parsedUrl.searchParams.keys()) {\n\t\tif ([\"key\", \"api_key\"].includes(name.toLowerCase())) {\n\t\t\tthrow new Error(\"Gemini API credential query parameters are not allowed\");\n\t\t}\n\t}\n\tconst resolvedApiKey = apiKey === undefined ? await getApiKey(init.signal ?? undefined) : apiKey;\n\tconst cloudflareApiKey = isCloudflareGateway() ? await resolveCloudflareApiKey(init.signal ?? undefined) : null;\n\tconst allowedOrigins = new Set([\n\t\tnew URL(getApiHost()).origin,\n\t\tnew URL(DEFAULT_API_HOST).origin,\n\t]);\n\tif ((resolvedApiKey || isGatewayConfigured()) && !allowedOrigins.has(parsedUrl.origin)) {\n\t\tthrow new Error(\"Gemini API request host is not allowed\");\n\t}\n\tconst headers = new Headers(init.headers);\n\theaders.delete(\"x-goog-api-key\");\n\theaders.delete(\"cf-aig-authorization\");\n\tfor (const [name, value] of Object.entries(buildAuthHeaders(resolvedApiKey, cloudflareApiKey))) {\n\t\theaders.set(name, value);\n\t}\n\ttry {\n\t\tconst response = await fetch(parsedUrl, { ...init, headers });\n\t\tresponseCredentials.set(response, { apiKey: resolvedApiKey, cloudflareApiKey });\n\t\treturn response;\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconst redactedMessage = redactGeminiCredentials(message, resolvedApiKey, cloudflareApiKey);\n\t\tif (redactedMessage === message) throw error;\n\t\tconst redactedError = new Error(redactedMessage);\n\t\tif (error instanceof Error) redactedError.name = error.name;\n\t\tthrow redactedError;\n\t}\n}\n\nexport function isGeminiApiAvailable(): boolean {\n\treturn hasCredentialSource({\n\t\tprovider: \"Gemini\",\n\t\tconfiguredValue: loadConfig().geminiApiKey,\n\t\tenvironmentValue: process.env.GEMINI_API_KEY,\n\t}) || isGatewayConfigured();\n}\n\nexport interface GeminiApiOptions {\n\tapiKey?: string;\n\tmodel?: string;\n\tmimeType?: string;\n\tsignal?: AbortSignal;\n\ttimeoutMs?: number;\n}\n\nexport interface GeminiGenerateContentResult {\n\ttext: string;\n\tfinishReason?: string;\n\tblockReason?: string;\n}\n\nexport async function queryGeminiApiWithInlineData(\n\tprompt: string,\n\tdata: string,\n\tmimeType: string,\n\toptions: GeminiApiOptions = {},\n): Promise<GeminiGenerateContentResult> {\n\tconst signal = withTimeout(options.signal, options.timeoutMs ?? 120000);\n\tconst apiKey = options.apiKey ?? await getApiKey(signal);\n\tif (!apiKey && !isGatewayConfigured()) {\n\t\tthrow new Error(\n\t\t\t\"Gemini API not configured. Either:\\n\" +\n\t\t\t`  1. Configure geminiApiKey in ${CONFIG_PATH} or set GEMINI_API_KEY\\n` +\n\t\t\t\"  2. Set GOOGLE_GEMINI_BASE_URL + CLOUDFLARE_API_KEY for Cloudflare AI Gateway routing\"\n\t\t);\n\t}\n\n\tconst model = options.model ?? DEFAULT_MODEL;\n\tconst url = `${getVersionedApiBase()}/models/${model}:generateContent`;\n\tconst body = {\n\t\tcontents: [\n\t\t\t{\n\t\t\t\trole: \"user\",\n\t\t\t\tparts: [\n\t\t\t\t\t{ inlineData: { mimeType, data } },\n\t\t\t\t\t{ text: prompt },\n\t\t\t\t],\n\t\t\t},\n\t\t],\n\t};\n\n\tconst res = await fetchGeminiApi(url, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\tbody: JSON.stringify(body),\n\t\tsignal,\n\t}, apiKey);\n\n\tif (!res.ok) {\n\t\tconst errorText = redactGeminiApiResponse(res, await res.text(), apiKey);\n\t\tthrow new Error(`Gemini API error ${res.status}: ${errorText.slice(0, 300)}`);\n\t}\n\n\tconst response = (await res.json()) as GenerateContentResponse;\n\tconst candidate = response.candidates?.[0];\n\tconst text = candidate?.content?.parts\n\t\t?.map((part) => part.text)\n\t\t.filter((part): part is string => typeof part === \"string\" && part.length > 0)\n\t\t.join(\"\\n\") ?? \"\";\n\n\treturn {\n\t\ttext,\n\t\t...(candidate?.finishReason ? { finishReason: candidate.finishReason } : {}),\n\t\t...(response.promptFeedback?.blockReason ? { blockReason: response.promptFeedback.blockReason } : {}),\n\t};\n}\n\nexport async function queryGeminiApiWithVideo(\n\tprompt: string,\n\tvideoUri: string,\n\toptions: GeminiApiOptions = {},\n): Promise<string> {\n\tconst signal = withTimeout(options.signal, options.timeoutMs ?? 120000);\n\tconst apiKey = options.apiKey ?? await getApiKey(signal);\n\tif (!apiKey && !isGatewayConfigured()) {\n\t\tthrow new Error(\n\t\t\t\"Gemini API not configured. Either:\\n\" +\n\t\t\t`  1. Configure geminiApiKey in ${CONFIG_PATH} or set GEMINI_API_KEY\\n` +\n\t\t\t\"  2. Set GOOGLE_GEMINI_BASE_URL + CLOUDFLARE_API_KEY for Cloudflare AI Gateway routing\"\n\t\t);\n\t}\n\n\tconst model = options.model ?? DEFAULT_MODEL;\n\tconst url = `${getVersionedApiBase()}/models/${model}:generateContent`;\n\n\tconst fileData: Record<string, string> = { fileUri: videoUri };\n\tif (options.mimeType) fileData.mimeType = options.mimeType;\n\n\tconst body = {\n\t\tcontents: [\n\t\t\t{\n\t\t\t\trole: \"user\",\n\t\t\t\tparts: [\n\t\t\t\t\t{ fileData },\n\t\t\t\t\t{ text: prompt },\n\t\t\t\t],\n\t\t\t},\n\t\t],\n\t};\n\n\tconst res = await fetchGeminiApi(url, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\tbody: JSON.stringify(body),\n\t\tsignal,\n\t}, apiKey);\n\n\tif (!res.ok) {\n\t\tconst errorText = redactGeminiApiResponse(res, await res.text(), apiKey);\n\t\tthrow new Error(`Gemini API error ${res.status}: ${errorText.slice(0, 300)}`);\n\t}\n\n\tconst data = (await res.json()) as GenerateContentResponse;\n\tconst text = data.candidates?.[0]?.content?.parts\n\t\t?.map((p) => p.text)\n\t\t.filter(Boolean)\n\t\t.join(\"\\n\");\n\n\tif (!text) throw new Error(\"Gemini API returned empty response\");\n\treturn text;\n}\n\ninterface GenerateContentResponse {\n\tcandidates?: Array<{\n\t\tcontent?: {\n\t\t\tparts?: Array<{ text?: string }>;\n\t\t};\n\t\tfinishReason?: string;\n\t}>;\n\tpromptFeedback?: {\n\t\tblockReason?: string;\n\t};\n}\n"]}
+{"version":3,"file":"gemini-api.js","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/gemini-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,YAAY,GACZ,MAAM,iBAAiB,CAAC;AAEzB,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AACrE,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAC7D,MAAM,WAAW,GAAG,sBAAsB,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAQhD,IAAI,YAAY,GAA2B,IAAI,CAAC;AAEhD,SAAS,UAAU;IAClB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,YAAY,GAAG,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC;QACJ,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,OAAO,YAAY,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,SAAiB;IACtE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB;IAC3B,OAAO,UAAU,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAoB;IACnD,OAAO,iBAAiB,CAAC;QACxB,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,UAAU,EAAE,CAAC,YAAY;QAC1C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC5C,MAAM;KACN,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACzB,OAAO,CACN,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACpD,gBAAgB,CAAC,UAAU,EAAE,CAAC,aAAa,CAAC;QAC5C,gBAAgB,CAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,oBAAoB,EAAE,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACnD,OAAO,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,UAAU,EAAE,IAAI,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAO,GAAG,UAAU,EAAE,WAAW,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB;IACjC,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAC1G,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAoB;IAC1D,OAAO,iBAAiB,CAAC;QACxB,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,UAAU,EAAE,CAAC,gBAAgB;QAC9C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAChD,MAAM;KACN,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,yBAAyB,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,mBAAmB,EAAE,IAAI,mBAAmB,CAAC;QACnD,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,UAAU,EAAE,CAAC,gBAAgB;QAC9C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;KAChD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAM,GAAkB,IAAI,EAAE,gBAAgB,GAAkB,yBAAyB,EAAE;IAC3H,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,UAAU,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,MAAiC,EAAE,gBAA2C,EAAE,QAAwB;IACtJ,IAAI,GAAG,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC7E,IAAI,QAAQ;QAAE,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAInC,CAAC;AAEL,MAAM,UAAU,uBAAuB,CAAC,QAAkB,EAAE,IAAY,EAAE,MAAsB,EAAE,QAAwB;IACzH,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,OAAO,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,IAAI,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,IAAI,QAAQ,CAAC,CAAC;AACvI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAiB,EACjB,IAAI,GAAgB,EAAE,EACtB,MAAsB;IAEtB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,oBAAoB,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpG,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACb,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpH,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC9B,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM;QAC5B,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,cAAc,IAAI,mBAAmB,EAAE,IAAI,OAAO,CAAC;IACrE,IAAI,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACvC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAChC,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACP,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAChG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1F,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACrG,IAAI,eAAe,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,KAAK,YAAY,KAAK;YAAE,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5D,MAAM,aAAa,CAAC;IACrB,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB;IAC7B,OAAO,mBAAmB,CAAC;QAC1B,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,UAAU,EAAE,CAAC,YAAY;QAC1C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;KAC5C,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,oBAAoB,EAAE,IAAI,qBAAqB,EAAE,IAAI,mBAAmB,EAAE,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B;IAC5C,OAAO,qBAAqB,EAAE,IAAI,mBAAmB,EAAE,CAAC;AACzD,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACd,sCAAsC;YACtC,kCAAkC,WAAW,0BAA0B;YACvE,0FAA0F;YAC1F,4GAA4G,CAC5G,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,mBAAmB,EAAE,WAAW,KAAK,kBAAkB,CAAC;IACvE,MAAM,IAAI,GAAG;QACZ,QAAQ,EAAE;YACT;gBACC,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE;oBACN,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;oBAClC,EAAE,IAAI,EAAE,MAAM,EAAE;iBAChB;aACD;SACD;KACD,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACN,EAAE,MAAM,CAAC,CAAC;IAEX,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK;QACrC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACzB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEnB,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAc,EACd,QAAgB,EAChB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,sCAAsC;YACtC,kCAAkC,WAAW,0BAA0B;YACvE,wFAAwF,CACxF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,mBAAmB,EAAE,WAAW,KAAK,kBAAkB,CAAC;IAEvE,MAAM,QAAQ,GAA2B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/D,IAAI,OAAO,CAAC,QAAQ;QAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAE3D,MAAM,IAAI,GAAG;QACZ,QAAQ,EAAE;YACT;gBACC,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE;oBACN,EAAE,QAAQ,EAAE;oBACZ,EAAE,IAAI,EAAE,MAAM,EAAE;iBAChB;aACD;SACD;KACD,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM;KACN,EAAE,MAAM,CAAC,CAAC;IAEX,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK;QAChD,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACnB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { hasCredentialSource, redactCredential, resolveCredential } from \"./credential-source.ts\";\nimport { getWebSearchConfigPath } from \"./utils.ts\";\nimport {\n\tisGeminiAdcAvailable,\n\tgetAdcAccessToken,\n\tgetAdcProject,\n\tgetAdcLocation,\n\tgetVertexApiBase,\n\tisVertexHost,\n} from \"./gemini-adc.ts\";\n\nconst DEFAULT_API_HOST = \"https://generativelanguage.googleapis.com\";\nconst API_VERSION = \"v1beta\";\nexport const API_BASE = `${DEFAULT_API_HOST}/${API_VERSION}`;\nconst CONFIG_PATH = getWebSearchConfigPath();\nexport const DEFAULT_MODEL = \"gemini-3.6-flash\";\n\ninterface GeminiApiConfig {\n\tgeminiApiKey?: unknown;\n\tgeminiBaseUrl?: unknown;\n\tcloudflareApiKey?: unknown;\n}\n\nlet cachedConfig: GeminiApiConfig | null = null;\n\nfunction loadConfig(): GeminiApiConfig {\n\tif (cachedConfig) return cachedConfig;\n\tif (!existsSync(CONFIG_PATH)) {\n\t\tcachedConfig = {};\n\t\treturn cachedConfig;\n\t}\n\n\tconst raw = readFileSync(CONFIG_PATH, \"utf-8\");\n\ttry {\n\t\tcachedConfig = JSON.parse(raw) as GeminiApiConfig;\n\t\treturn cachedConfig;\n\t} catch (err) {\n\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\tthrow new Error(`Failed to parse ${CONFIG_PATH}: ${message}`);\n\t}\n}\n\nfunction withTimeout(signal: AbortSignal | undefined, timeoutMs: number): AbortSignal {\n\tconst timeout = AbortSignal.timeout(timeoutMs);\n\treturn signal ? AbortSignal.any([signal, timeout]) : timeout;\n}\n\nfunction normalizeApiKey(value: unknown): string | null {\n\tif (typeof value !== \"string\") return null;\n\tconst normalized = value.trim();\n\treturn normalized.length > 0 ? normalized : null;\n}\n\nfunction normalizeBaseUrl(value: unknown): string | null {\n\tif (typeof value !== \"string\") return null;\n\tconst normalized = value.trim().replace(/\\/+$/, \"\");\n\treturn normalized.length > 0 ? normalized : null;\n}\n\nfunction isCloudflareGateway(): boolean {\n\treturn getApiHost().includes(\"gateway.ai.cloudflare.com\");\n}\n\nexport async function getApiKey(signal?: AbortSignal): Promise<string | null> {\n\treturn resolveCredential({\n\t\tprovider: \"Gemini\",\n\t\tconfiguredValue: loadConfig().geminiApiKey,\n\t\tenvironmentValue: process.env.GEMINI_API_KEY,\n\t\tsignal,\n\t});\n}\n\nexport function getApiHost(): string {\n\treturn (\n\t\tnormalizeBaseUrl(process.env.GOOGLE_GEMINI_BASE_URL) ??\n\t\tnormalizeBaseUrl(loadConfig().geminiBaseUrl) ??\n\t\tDEFAULT_API_HOST\n\t);\n}\n\nexport function getVersionedApiBase(): string {\n\tconst project = getAdcProject();\n\tconst location = getAdcLocation();\n\tif (isGeminiAdcAvailable() && project && location) {\n\t\treturn getVertexApiBase(project, location);\n\t}\n\treturn `${getApiHost()}/${API_VERSION}`;\n}\n\nexport function getUploadBase(): string {\n\treturn `${getApiHost()}/upload/${API_VERSION}`;\n}\n\nfunction getLegacyCloudflareApiKey(): string | null {\n\treturn normalizeApiKey(process.env.CLOUDFLARE_API_KEY) ?? normalizeApiKey(loadConfig().cloudflareApiKey);\n}\n\nasync function resolveCloudflareApiKey(signal?: AbortSignal): Promise<string | null> {\n\treturn resolveCredential({\n\t\tprovider: \"Cloudflare\",\n\t\tconfiguredValue: loadConfig().cloudflareApiKey,\n\t\tenvironmentValue: process.env.CLOUDFLARE_API_KEY,\n\t\tsignal,\n\t});\n}\n\nexport function getCloudflareApiKey(): string | null {\n\treturn getLegacyCloudflareApiKey();\n}\n\nexport function isGatewayConfigured(): boolean {\n\treturn isCloudflareGateway() && hasCredentialSource({\n\t\tprovider: \"Cloudflare\",\n\t\tconfiguredValue: loadConfig().cloudflareApiKey,\n\t\tenvironmentValue: process.env.CLOUDFLARE_API_KEY,\n\t});\n}\n\nexport function buildAuthHeaders(apiKey: string | null = null, cloudflareApiKey: string | null = getLegacyCloudflareApiKey()): Record<string, string> {\n\tif (!isCloudflareGateway()) return apiKey ? { \"x-goog-api-key\": apiKey } : {};\n\treturn cloudflareApiKey ? { \"cf-aig-authorization\": `Bearer ${cloudflareApiKey}` } : {};\n}\n\nfunction redactGeminiCredentials(text: string, apiKey: string | null | undefined, cloudflareApiKey: string | null | undefined, adcToken?: string | null): string {\n\tlet out = redactCredential(redactCredential(text, apiKey), cloudflareApiKey);\n\tif (adcToken) out = redactCredential(out, adcToken);\n\treturn out;\n}\n\nconst responseCredentials = new WeakMap<Response, {\n\tapiKey: string | null | undefined;\n\tcloudflareApiKey: string | null | undefined;\n\tadcToken?: string | null;\n}>();\n\nexport function redactGeminiApiResponse(response: Response, text: string, apiKey?: string | null, adcToken?: string | null): string {\n\tconst credentials = responseCredentials.get(response);\n\treturn redactGeminiCredentials(text, credentials?.apiKey ?? apiKey, credentials?.cloudflareApiKey, credentials?.adcToken ?? adcToken);\n}\n\nexport async function fetchGeminiApi(\n\turl: string | URL,\n\tinit: RequestInit = {},\n\tapiKey?: string | null,\n): Promise<Response> {\n\tconst parsedUrl = new URL(url);\n\tfor (const name of parsedUrl.searchParams.keys()) {\n\t\tif ([\"key\", \"api_key\"].includes(name.toLowerCase())) {\n\t\t\tthrow new Error(\"Gemini API credential query parameters are not allowed\");\n\t\t}\n\t}\n\tconst project = getAdcProject();\n\tconst location = getAdcLocation();\n\tconst adcMode = isGeminiAdcAvailable() && !!project && !!location && isVertexHost(parsedUrl.origin);\n\tlet adcToken: string | null = null;\n\tif (adcMode) {\n\t\tadcToken = await getAdcAccessToken(init.signal ?? undefined);\n\t}\n\tconst resolvedApiKey = adcMode ? null : (apiKey === undefined ? await getApiKey(init.signal ?? undefined) : apiKey);\n\tconst cloudflareApiKey = isCloudflareGateway() ? await resolveCloudflareApiKey(init.signal ?? undefined) : null;\n\tconst allowedOrigins = new Set([\n\t\tnew URL(getApiHost()).origin,\n\t\tnew URL(DEFAULT_API_HOST).origin,\n\t\t...(adcMode ? [parsedUrl.origin] : []),\n\t]);\n\tconst needsAuth = resolvedApiKey || isGatewayConfigured() || adcMode;\n\tif (needsAuth && !allowedOrigins.has(parsedUrl.origin)) {\n\t\tthrow new Error(\"Gemini API request host is not allowed\");\n\t}\n\tconst headers = new Headers(init.headers);\n\theaders.delete(\"x-goog-api-key\");\n\theaders.delete(\"cf-aig-authorization\");\n\theaders.delete(\"authorization\");\n\tif (adcMode && adcToken) {\n\t\theaders.set(\"Authorization\", `Bearer ${adcToken}`);\n\t} else {\n\t\tfor (const [name, value] of Object.entries(buildAuthHeaders(resolvedApiKey, cloudflareApiKey))) {\n\t\t\theaders.set(name, value);\n\t\t}\n\t}\n\ttry {\n\t\tconst response = await fetch(parsedUrl, { ...init, headers });\n\t\tresponseCredentials.set(response, { apiKey: resolvedApiKey, cloudflareApiKey, adcToken });\n\t\treturn response;\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconst redactedMessage = redactGeminiCredentials(message, resolvedApiKey, cloudflareApiKey, adcToken);\n\t\tif (redactedMessage === message) throw error;\n\t\tconst redactedError = new Error(redactedMessage);\n\t\tif (error instanceof Error) redactedError.name = error.name;\n\t\tthrow redactedError;\n\t}\n}\n\nfunction hasGeminiApiKeySource(): boolean {\n\treturn hasCredentialSource({\n\t\tprovider: \"Gemini\",\n\t\tconfiguredValue: loadConfig().geminiApiKey,\n\t\tenvironmentValue: process.env.GEMINI_API_KEY,\n\t});\n}\n\nexport function isGeminiApiAvailable(): boolean {\n\treturn isGeminiAdcAvailable() || hasGeminiApiKeySource() || isGatewayConfigured();\n}\n\n/**\n * Whether the Gemini Files-API paths (YouTube and local video analysis) can\n * authenticate. These use the Gemini Files API and metadata endpoints, which do\n * not support ADC, so they still require an API key or a Cloudflare gateway.\n */\nexport function isGeminiApiAvailableWithVideo(): boolean {\n\treturn hasGeminiApiKeySource() || isGatewayConfigured();\n}\n\nexport interface GeminiApiOptions {\n\tapiKey?: string;\n\tmodel?: string;\n\tmimeType?: string;\n\tsignal?: AbortSignal;\n\ttimeoutMs?: number;\n}\n\nexport interface GeminiGenerateContentResult {\n\ttext: string;\n\tfinishReason?: string;\n\tblockReason?: string;\n}\n\nexport async function queryGeminiApiWithInlineData(\n\tprompt: string,\n\tdata: string,\n\tmimeType: string,\n\toptions: GeminiApiOptions = {},\n): Promise<GeminiGenerateContentResult> {\n\tconst signal = withTimeout(options.signal, options.timeoutMs ?? 120000);\n\tconst apiKey = isGeminiAdcAvailable() ? null : (options.apiKey ?? await getApiKey(signal));\n\tif (!apiKey && !isGatewayConfigured() && !isGeminiAdcAvailable()) {\n\t\tthrow new Error(\n\t\t\t\"Gemini API not configured. Either:\\n\" +\n\t\t\t`  1. Configure geminiApiKey in ${CONFIG_PATH} or set GEMINI_API_KEY\\n` +\n\t\t\t\"  2. Set GOOGLE_GEMINI_BASE_URL + CLOUDFLARE_API_KEY for Cloudflare AI Gateway routing\\n\" +\n\t\t\t\"  3. Set geminiAuth to \\\"adc\\\" with a Google Cloud ADC (GOOGLE_APPLICATION_CREDENTIALS) + project/location\"\n\t\t);\n\t}\n\n\tconst model = options.model ?? DEFAULT_MODEL;\n\tconst url = `${getVersionedApiBase()}/models/${model}:generateContent`;\n\tconst body = {\n\t\tcontents: [\n\t\t\t{\n\t\t\t\trole: \"user\",\n\t\t\t\tparts: [\n\t\t\t\t\t{ inlineData: { mimeType, data } },\n\t\t\t\t\t{ text: prompt },\n\t\t\t\t],\n\t\t\t},\n\t\t],\n\t};\n\n\tconst res = await fetchGeminiApi(url, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\tbody: JSON.stringify(body),\n\t\tsignal,\n\t}, apiKey);\n\n\tif (!res.ok) {\n\t\tconst errorText = redactGeminiApiResponse(res, await res.text(), apiKey);\n\t\tthrow new Error(`Gemini API error ${res.status}: ${errorText.slice(0, 300)}`);\n\t}\n\n\tconst response = (await res.json()) as GenerateContentResponse;\n\tconst candidate = response.candidates?.[0];\n\tconst text = candidate?.content?.parts\n\t\t?.map((part) => part.text)\n\t\t.filter((part): part is string => typeof part === \"string\" && part.length > 0)\n\t\t.join(\"\\n\") ?? \"\";\n\n\treturn {\n\t\ttext,\n\t\t...(candidate?.finishReason ? { finishReason: candidate.finishReason } : {}),\n\t\t...(response.promptFeedback?.blockReason ? { blockReason: response.promptFeedback.blockReason } : {}),\n\t};\n}\n\nexport async function queryGeminiApiWithVideo(\n\tprompt: string,\n\tvideoUri: string,\n\toptions: GeminiApiOptions = {},\n): Promise<string> {\n\tconst signal = withTimeout(options.signal, options.timeoutMs ?? 120000);\n\tconst apiKey = options.apiKey ?? await getApiKey(signal);\n\tif (!apiKey && !isGatewayConfigured()) {\n\t\tthrow new Error(\n\t\t\t\"Gemini API not configured. Either:\\n\" +\n\t\t\t`  1. Configure geminiApiKey in ${CONFIG_PATH} or set GEMINI_API_KEY\\n` +\n\t\t\t\"  2. Set GOOGLE_GEMINI_BASE_URL + CLOUDFLARE_API_KEY for Cloudflare AI Gateway routing\"\n\t\t);\n\t}\n\n\tconst model = options.model ?? DEFAULT_MODEL;\n\tconst url = `${getVersionedApiBase()}/models/${model}:generateContent`;\n\n\tconst fileData: Record<string, string> = { fileUri: videoUri };\n\tif (options.mimeType) fileData.mimeType = options.mimeType;\n\n\tconst body = {\n\t\tcontents: [\n\t\t\t{\n\t\t\t\trole: \"user\",\n\t\t\t\tparts: [\n\t\t\t\t\t{ fileData },\n\t\t\t\t\t{ text: prompt },\n\t\t\t\t],\n\t\t\t},\n\t\t],\n\t};\n\n\tconst res = await fetchGeminiApi(url, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\tbody: JSON.stringify(body),\n\t\tsignal,\n\t}, apiKey);\n\n\tif (!res.ok) {\n\t\tconst errorText = redactGeminiApiResponse(res, await res.text(), apiKey);\n\t\tthrow new Error(`Gemini API error ${res.status}: ${errorText.slice(0, 300)}`);\n\t}\n\n\tconst data = (await res.json()) as GenerateContentResponse;\n\tconst text = data.candidates?.[0]?.content?.parts\n\t\t?.map((p) => p.text)\n\t\t.filter(Boolean)\n\t\t.join(\"\\n\");\n\n\tif (!text) throw new Error(\"Gemini API returned empty response\");\n\treturn text;\n}\n\ninterface GenerateContentResponse {\n\tcandidates?: Array<{\n\t\tcontent?: {\n\t\t\tparts?: Array<{ text?: string }>;\n\t\t};\n\t\tfinishReason?: string;\n\t}>;\n\tpromptFeedback?: {\n\t\tblockReason?: string;\n\t};\n}\n"]}